Telecom
Cyberespionage: NCC Warns of Iranian Hacking Group Targeting Telcos, ISPs
The Nigerian Communications Commission (NCC) has again notified the general public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.
This is inline with the commission’s commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected.
The warning was contained in a statement released by Dr. Ikechukwu Adinde, Director, Public Affairs, NCC, on Monday in Abuja.
According to the statement, “An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage”.
Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.
According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.
The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.
By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).
Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.
Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s back doors, consisting of over 20 domains, including six that were previously not associated with the threat actors.
According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization.
The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.
However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.
Specifically, telecom consumers and the general public are advised to:
1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
4. Implement the use of Intrusion Prevention Systems that monitors your network.
5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.
For further technical assistance, contact ngCERT on [email protected].
The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space.
This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.
Lebara Nigeria has become a member of the Global System for Mobile Communications Association (GSMA) as it expands operations in the West African country.
The membership places Lebara Nigeria within a global network of more than 1,000 mobile operators, device manufacturers, technology companies and digital service providers.
Through the GSMA, the company will have access to industry research, technical standards, policy engagement and industry initiatives.
Lebara Nigeria said the move reflects its participation in the wider telecommunications ecosystem as it develops its operations in Nigeria’s mobile market.
Nigeria’s telecommunications sector plays a central role in the country’s digital economy, with more than 170 million active mobile subscriptions supporting services such as digital payments, e-commerce, education and healthcare.
Industry analysts say participation in international bodies such as the GSMA supports knowledge sharing and the adoption of industry standards.
Lebara Nigeria said GSMA membership will support its engagement with industry developments and policy discussions in the telecommunications sector.
The company said it remains focused on operating in Nigeria’s mobile telecommunications market as demand for connectivity continues to grow.
GSM Association is the advocacy and lobbying organization for the mobile communications industry, representing more than 1,000 mobile operators as full members and a further 400 companies in the broader mobile ecosystem as associate members.
Management of Vitel Wireless, mobile virtual network operator (MVNO), has distanced the company from a fraudulent scheme operating under the name: “Vitel Shares Services.”
In an official statement, the management clarified that Vitel Wireless is not selling shares or running any investment schemes.
They warned that the operators of “Vitel Shares Services” are using unauthorised websites, mobile applications, social media promotions, and bank accounts falsely linked to Vitel Wireless to mislead the public.
The statement reads: “The attention of Vitel Wireless has been drawn to a fraudulent scheme operating under the name ‘Vitel Shares Services.’
“We wish to state clearly that Vitel Wireless has no affiliation with Vitel Shares Services, or any platform claiming to offer Vitel shares, investments, or financial products through unofficial channels.
“We do not solicit investments through agents, social media, websites, apps, or third parties. Any platform claiming to offer Vitel Wireless shares or investments outside our official channels is fraudulent and should be treated as such.
“We urge the general public to remain vigilant and verify all information through official Vitel Wireless communication channels before making any payments or sharing personal data.”
Airtel Nigeria has concluded its second Customer Forum in Abuja, bringing together a large section of customers including high-volume data subscribers, 5G customers, and key stakeholders in another landmark engagement aimed at addressing concerns around data usage, transparency, and customer experience.
The forum themed “Understanding Your Data and Taking Control 2.0.” aimed to strengthen trust in Nigeria’s rapidly evolving telecommunications landscape. The session also featured inputs from representatives of the Nigerian Communications Commission (NCC).
Delivering the Keynote remarks, Dinesh Balsingh, CEO of Airtel Nigeria, who was represented by Femi Adeniran, Director, Corporate Communications and CSR, emphasised that trust remains the most valuable currency in telecommunications, and Airtel remains committed to strengthening customer confidence through transparency and continuous engagement.
He explained that discussions around data consumption have become increasingly important as digital lifestyles evolve, with smartphones, cloud services, video streaming and emerging artificial intelligence applications significantly influencing data usage patterns.
According to him, Airtel recently introduced the Airtel Data Calculator, an innovative tool designed to help customers estimate their data needs based on online activities such as multimedia streaming, video calls, social media usage, and gaming.
“The purpose of the Airtel Data Calculator is to provide greater visibility, support informed decision-making and place more information directly in the hands of customers. Because transparency should never be viewed as a compliance exercise. Transparency is good business,” he stated.
He further reassured customers that Airtel has no incentive to shortchange subscribers through inaccurate billing, forced spending or unnecessary data depletion, stressing that the company’s growth depends on customer satisfaction, loyalty and trust.
Adeniran also highlighted Airtel’s continued investments in network infrastructure, fibre capacity, digital platforms, artificial intelligence capabilities, customer service systems and workforce development, noting that these investments are aimed at improving service quality and enhancing customer experiences.
Oladokun Oye, Director, Customer Experience, Airtel Nigeria, while welcoming participants to the event, said the forum was created to provide customers with an open platform for education, engagement and problem-solving, noting that the customer remains at the centre of Airtel’s business.
“Data has become central to everyday life, powering work, education, commerce, entertainment, healthcare and countless opportunities. As data usage grows, so too does the desire for greater visibility and understanding.
Today’s conversation is part of an ongoing journey. A journey toward greater transparency. A journey toward deeper understanding. And a journey toward a better customer experience for every Airtel subscriber,” he said.
The forum also featured practical demonstrations on data consumption management, device settings, and usage habits that impact data usage. It also included an interactive session by which Airtel teams provided clarifications and offered feedback to customers.
The Abuja event follows the successful maiden edition held earlier this year in Lagos and aligns with broader industry efforts led by the Nigerian Communications Commission (NCC) to improve consumer awareness, transparency, and confidence within the telecommunications sector.
Lebara Nigeria Becomes Member of GSMA Network
FG to Abolish JSS-SSS Separation Policy after 20m Pupils Drop Out
Vitel Wireless Warns Public, Says it Not Running any Investment Scheme
Army Says Terrorists Now Recruiting, Raising Funds Online
FG Mulls National Skills Database to Tackle Unemployment
Mobile Internet Gender Gap Widest in Africa – GSMA
London Strengthens Global Investment Ties with Africa @ First Ever London-Africa Business Summit
FG Targets Alleged N3tn Capital Flight, Opens Airtime Credit Market to Nigerian Fintechs
Japan, UNESCO Boost Digital Learning in 15 CoEs with Donation of ICT Equipment
Good News for DStv Users: Watch over 160 Channels Without Paying Extra
E-Business2 days agoLG Showcases AI-Powered Smart Living Innovations @ Africa Technology Expo 2026
Telecom2 days agoOADC Reaffirms Abundant Capacity in Data Centres in Nigeria to Host Financial Data
E-Financial2 days agoUBA mobilises employees across Africa for environmental clean-up, wellness campaign
General News2 days agoLASTMA Launches 3367 Toll-Free Hotline for Emergency Response, Traffic Management
E-Financial2 days agoPalmPay Calls for Trust, Infrastructure and Responsible AI to Drive Payment Ecosystem Innovation
E-Business2 days agoWant a Business Loan Without Interest? SMEDAN Launches N500m Fund
Telecom2 days agoALTON Backs NCC’s Local Smartphone Manufacturing Drive to Widen Digital Access
E-Financial2 days agongCERT Raises Alarm over Surge in Banks’ ATM Cyberattacks