#Q3marketupdates #Q3investorpresentations

Mkt share up 214 bps to 16.4%
NBM at 25.6%
8% Individual WRP growth compared to private industry de-growth of 6%
25.6% New Business Margin on the back of growth, balanced product mix

At about 19:00 hrs local time on January 26, 2021, Peoples Gazette's website (https://t.co/wkUFy0ZN63) was hit by a coordinated disruption of service across all telecommunication networks in Nigeria.

This disruption, we are increasingly learning from top federal sources, was based on a directive, from the Nigerian government to MTN, Glo Mobile and other telecom firms, that sought an immediate blacklist of our web address as well as all other alternative domain names.

Our internal assessments and notes from our readers indicate a total restriction on our website for people connecting via MTN, Glo Mobile and Airtel, i.e.: a vast majority of Nigerian Internet users.

Since our inception, we have diligently carried out our sole duty of bringing to public awareness, the rot that exists in our public and private institutions.

We have exposed the abuse of power by government officials, agencies, and cronies; corrupt practices in the public and private sectors and flagrant abuse of human rights and the rule of law by security agencies.

As part of our commitment to keeping our customers/community protected & informed, we are releasing a blog that shines light on transition between Stage 1 and 2 of #Solorigate/#SUNBURST campaign, custom Cobalt Strike loaders, post-exploit. artifacts, IOCs: https://t.co/b0ReHMa63u

Here are some highlights:
The missing link between the Solorigate backdoor and the custom #CobaltStrike loaders observed during the #Solorigate is an Image File Execution Options (IFEO) Debugger registry value created for the legitimate process dllhost.exe (ATT&CK ID: T1546.012).

Once the registry value is created, the attackers wait for the occasional execution of dllhost.exe, which might happen naturally on a system. This execution triggers a process launch of wscript.exe configured to run the VBScript file dropped by the SolarWinds backdoor (Stage 1).

The VBScript in turn runs rundll32.exe, activating the Cobalt Strike loader DLL using a clean parent/child process tree completely disconnected from the SolarWinds process. Finally, the VBScript removes the previously created IFEO value to clean up any traces of execution.

On the custom Cobalt Strike Loaders: we identified several second-stage malware, including TEARDROP, Raindrop, and other custom loaders for the Cobalt Strike beacon. During the lateral movement phase, the custom loader DLLs are dropped mostly in existing Windows sub-directories.

There’s rumour about confidential negotiations btn the Biden admin and the German gov. Their goal: to find a way out of the mess in which the whole transatlantic community finds itself because of Merkel’s support for Putin’s pipeline—Nord Stream 2

2/ The preferred solution for the Biden team would be to deny Putin the ability to exercise energy blackmail against Central Europe and Ukraine, while at the same time foregoing sanctions against Germany.

3/ Early in his career, Biden’s Secretary of State Anthony @SecBlinken had analyzed the decision of the Reagan administration not to levy sanctions against West Europeans for building the Siberian pipeline with the Soviets.

4/ See for example:

5/ Reagan decided to take a step back, calculating that the unity of the West was more important than the gas pipeline. Not even Lady Thatcher supported Reagan’s policy.

0/ If you’re an SMB operator and want to increase the value of your business, focus on 2 things above all else.

1. EBITDA: how much $ do you make
2. Risk: how reliable is the $ you make

Enough has been written about #1. Here are 5 things you can do to tackle #2:

[THREAD]

1/ All 5 of these tactics are a function of the same guiding principle:

Spend more time working ON the business, not IN the business.

Your job as CEO is to consistently:

- Identify opportunity
- Execute once
- Set process
- Delegate
- Fire yourself

With that said…

2/ Establish your focus

Most SMBs survive in the early days through 1-2 key customers.

If you do a good job, they'll give you more business.

That's the trap.

If it's not in your core focus, resist the urge.

If you don't you'll become a consulting firm for 1 customer.

3/ Eliminate Key Man Risk

SMBs are overly reliant on a small handful of individuals to run the operation.

Implication: Most knowledge about the business sits in the heads of a few people.

Take the time to develop strong Tier 2 management - this creates redundancy in the org

4/ Institute Operating Process

Strong Tier 2 management isn't good enough. You need knowledge to live in docs and systems, not just in brains.

Every dept should have a stand alone playbook.

An easy test: "how quickly can somebody that knows nothing about the dept. plug in?"

"If you create it for yourself, it’s art.

If you create it for others, it’s business."

@naval