Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

Telecom

Attackers Exploit Stolen Session Cookies to Bypass Multi Factor Authentication and Gain Access to Corporate Resources – Sophos Report Reveals

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, today announced in the Sophos X-Ops report, “Cookie stealing: the new perimeter bypass,” that active adversaries are increasingly exploiting stolen session cookies to bypass Multi-Factor Authentication (MFA) and gain access to corporate resources.

In some cases, the cookie theft itself is a highly targeted attack, with adversaries scraping cookie data from compromised systems within a network and using legitimate executable to disguise the malicious activity.

Once the attackers obtain access to corporate web-based and cloud resources using the cookies, they can use them for further exploitation such as business email compromise, social engineering to gain additional system access, and even modification of data or source code repositories.

“Over the past year, we’ve seen attackers increasingly turn to cookie theft to work around the growing adoption of MFA. Attackers are turning to new and improved versions of information stealing malware like Raccoon Stealer to simplify the process of obtaining authentication cookies, also known as access tokens,” said Sean Gallagher, principal threat researcher, Sophos. “If attackers have session cookies, they can move freely around a network, impersonating legitimate users.”

Session, or authentication, cookies are a particular type of cookie stored by a web browser when a user logs into web resources. If attackers obtain them, then they can conduct a “pass-the-cookie” attack whereby they inject the access token into a new web session, tricking the browser into believing it is the authenticated user and nullifying the need for authentication.

Since a token is also created and stored on a web browser when using MFA, this same attack can be used to bypass this additional layer of authentication.

Compounding the issue is that many legitimate web-based applications have long-lasting cookies that rarely or never expire; other cookies only expire if the user specifically logs out of the service.

Thanks to the malware-as-a-service industry, it’s getting easier for entry-level attackers to get involved in credential theft. For example, all they need to do is buy a copy of an information-stealing Trojan like Raccoon Stealer to collect data like passwords and cookies in bulk and then sell them on criminal marketplaces, including Genesis.

Other criminals on the attack chain, such as ransomware operators, can then buy this data and sift through it to leverage anything they deem useful for their attacks.

Conversely, in two of the recent incidents that Sophos investigated, attackers took a more targeted approach. In one case, the attackers spent months inside a target’s network gathering cookies from the Microsoft Edge browser.

The initial compromise occurred via an exploit kit, and then the attackers used a combination of Cobalt Strike and Meterpreter activity to abuse a legitimate compiler tool to scrape access tokens. In another case, the attackers used a legitimate Microsoft Visual Studio component to drop a malicious payload that scraped cookie files for a week.

“While historically we’ve seen bulk cookie theft, attackers are now taking a targeted and precise approach to cookie stealing. Because so much of the workplace has become web-based, there really is no end to the types of malicious activity attackers can carry out with stolen session cookies. They can tamper with cloud infrastructures, compromise business email, and convince other employees to download malware or even rewrite code for products. The only limitation is their own creativity,” said Gallagher.

“Complicating matters is that there is no easy fix. For example, services can shorten the lifespan of cookies, but that means users must re-authenticate more often, and, as attackers turn to legitimate applications to scrape cookies, companies need to combine malware detection with behavioral analysis.”

To learn more about session cookie theft and how adversaries are exploiting the technique to carry out malicious activity, read the full report, “Cookie Stealing: the new perimeter bypass,” on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

NCC, REA Move to Power Telecoms with Renewable Energy

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) and Rural Electrification Agency (REA) have teamed up to develop an initiative that will reduce the $350 million annual spending on diesel by telecom operators in Nigeria.

NCC, REA Move to Power Telecoms with Renewable Energy

According to a press statement  by Nnenna Ukoha, acting had of Public Affairs, NCC, this collaboration will focus on deploying renewable energy solutions to support telecom infrastructure, particularly in rural and underserved areas.

To that end, the two agencies have inaugurated what they called NCC–REA Collaboration Committee, aimed at deploying renewable energy solutions to power telecom infrastructure across the country.

According to the State of Africa’s Infrastructure Report 2025 by the Africa Finance Corporation, telecom operators in Nigeria consume more than 40 million litres of diesel every month, costing them over $350 million annually.

The statement read, “The Nigerian Communications Commission has formally inaugurated the NCC–REA Collaboration Committee, marking a pivotal step towards advancing Nigeria’s digital and energy inclusion objectives by developing modalities for the deployment of renewable energy to support telecom infrastructure in Nigeria.”

The inauguration ceremony, held on Friday, at the NCC Headquarters in Abuja, was presided over by Dr Aminu Maida, executive vice chairman and chief executive officer, NCC.

Maida was joined by Abba Aliyu, managing director of the REA, along with senior executives and committee members from both organisations.

Speaking at the event, Maida described the collaboration as a timely and strategic alignment of national priorities.

He noted that bridging the connectivity and power gaps in rural areas remains critical for Nigeria’s growth and development.

He highlighted that the demand for digital services and connected communities creates an opportunity for renewable energy to play a crucial role.

Maida further emphasised that the partnership goes beyond infrastructure; it is aimed at driving inclusion, reducing inequalities, and fostering shared prosperity.

“Whether it is powering a base station or enabling a child to access digital learning, this partnership has the potential to transform realities and bring opportunity closer to the people.

“This initiative is about more than infrastructure, it is about driving inclusion, bridging inequalities and creating the conditions for shared prosperity,” he was quoted in the statement.

He also noted that the initiative aligns with President Bola Tinubu’s Renewed Hope Agenda, which aims to ensure no community is left behind in Nigeria’s energy and digital transformation.

Aliyu, representing REA, expressed confidence in the transformative potential of the collaboration.

“This partnership will unlock sustainable development opportunities for millions of Nigerians, especially those in areas lacking traditional infrastructure,” he said.

He further emphasised that the collaboration would address both energy and connectivity gaps, benefiting those who are currently underserved.

The newly established NCC-REA Collaboration Committee will work to co-develop and implement integrated solutions that leverage renewable energy to power telecom sites.

The statement noted that the committee will also focus on sharing geospatial data to improve planning, aligning funding frameworks, and tracking the socio-economic impact of the project through clear performance indicators.

 


Kindly share this post
Continue Reading

Telecom

NCC Approves MTN, 9Mobile Roaming Collaboration Deal

Published

on

Kindly share this post

MTN Nigeria Communications Plc has announced the execution of a national roaming agreement with Emerging Markets Telecommunications Services Limited (9Mobile), a move that signals a major milestone in Nigeria’s telecommunications landscape.

NCC Approves MTN, 9Mobile Roaming Collaboration Deal

The Nigerian Communications Commission (NCC), the industry’s regulatory authority, has approved the three-year deal, which allows 9Mobile subscribers to roam seamlessly on MTN Nigeria’s extensive network infrastructure across the country.

The agreement, effective immediately, will significantly enhance connectivity and user experience for 9Mobile customers, particularly in areas where its network coverage is limited.

By leveraging MTN’s expansive infrastructure, 9Mobile can now offer improved service reach and reliability, without duplicating capital-intensive investments in network deployment.

In a notice to the Nigerian Exchange Limited and the investing public, MTN Nigeria described the arrangement as a strategic collaboration that underscores its leadership in fostering innovation, industry cooperation, and operational efficiency.

The company emphasized that the initiative aligns with the NCC’s broader objective of promoting infrastructure sharing to improve telecommunications services nationwide.

“This agreement represents a significant step in our commitment to driving industry collaboration, improving customer experience, and supporting the NCC’s vision of a fully connected Nigeria,” said Karl Toriola, chief executive officer, MTN Nigeria.

“Delivering the scale required for telecommunications services in Nigeria requires strong collaboration between the private sector, public sector, and long-term investors. This agreement demonstrates what we can achieve when we collaborate, and we are delighted to announce it today after months of groundwork.”The national roaming deal enables subscribers from 9Mobile to access voice and data services through MTN’s network in areas where the former lacks adequate coverage.

This marks the first such large-scale, cross-network roaming arrangement between two major operators in Nigeria, setting a precedent for future cooperative efforts in the telecom industry.

MTN Nigeria highlighted that the agreement contributes to more effective use of telecommunications resources, reduces infrastructure duplication, and accelerates the expansion of mobile broadband access across underserved regions.

It also supports both operators’ sustainability objectives by maximizing existing investments and reducing the environmental impact of deploying overlapping network facilities.

“This strategic collaboration is yet another first in the country by MTN Nigeria and marks a significant milestone for the sustainability of the telecommunications industry,” the company stated.

“By enabling national roaming, MTN Nigeria is contributing to a more effective use of telecommunications resources and accelerating efforts to expand connectivity across the country.”

The agreement is expected to benefit not just subscribers and operators but also regulators and investors who have consistently advocated for policies that promote shared infrastructure and efficient capital utilization in Nigeria’s digital economy.

Uto Ukpanah,  company secretary, MTN Nigeria, affirmed the company’s ongoing dedication to initiatives that create shared value.

“MTN remains committed to fostering innovation and partnerships that create sustainable value for all stakeholders while promoting digital and financial inclusion nationwide,” she noted.

With the successful rollout of this agreement, the telecoms industry is expected to see improved service delivery and expanded access to quality mobile services, especially in rural and semi-urban communities. The collaboration sets a benchmark for future inter-operator partnerships and reinforces the importance of regulatory support in advancing national connectivity goals.

 

 

 

 


Kindly share this post
Continue Reading

Telecom

Don’t Visit Telecom Centers for Now — ALTON Warns of SIM Service Downtime

Published

on

Kindly share this post

Association of Licensed Telecommunications Operators of Nigeria (ALTON) has announced a temporary disruption in SIM-related services across all mobile networks in the country.

The disruption, according to a statement on Wednesday, follows a directive from the National Identity Management Commission (NIMC), mandating mobile network operators (MNOs) to migrate to a new identity verification platform.

ALTON said the transition had triggered unforeseen technical challenges, affecting services such as SIM registration, replacement, and mobile number portability.

“While the new platform is intended to enhance the integrity and efficiency of identity management in Nigeria, unfortunately, the transition has temporarily impacted service delivery,” the association stated.

It added that MNOs would not be able to support SIM swaps, new activations, and related services until the issues are resolved.

ALTON noted that its members are working closely with the Nigerian Communications Commission (NCC), NIMC, and other stakeholders to restore normalcy.

The association appealed for public understanding and urged subscribers to delay visits to service centers for SIM-related matters.

“We sincerely apologise for the inconvenience and will continue to provide timely updates,” the statement read.

ALTON reaffirmed its commitment to delivering secure and quality telecommunications services to Nigerians.


Kindly share this post
Continue Reading

Trending