Telecom
Beware! Hackers Can Unlock, Steal Your Vehicles – NCC Warns Nigerians
The Nigerian Communications Commission (NCC) wishes to alert telecom consumers and members of the public on an ongoing cyber-vulnerability that allows a nearby hacker to unlock vehicles, start their engines wirelessly and make away with the cars.
The fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this emergent danger, where hackers take advantage to unlock and start a compromised car.
According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.
With this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether. “Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly. The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.
However, the NCC-CSIRT, in the advisory, has offer some precautionary measures or solutions that can be adopted by car owners to prevent falling victim to the attack.
According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter. Additionally, vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.”
Importantly, car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.
The PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit. The RKE system, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.
Additionally, in a related advisory, the NCC, based on another detection by CSIRT, wishes to inform the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store. This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.
The malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process. Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.
As a consequence, a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.
It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible.
To avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users have been advised to avoid downloading unnecessary apps or installing apps from unofficial sources. The NCC also wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.
Conclusively, the NCC recommends that unauthorised transactions be checked against any installed app. Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software.
Modern messengers, such as WhatsApp, Telegram, Signal and others, are often used for illicit purposes. Kaspersky Digital Footprint Intelligence has conducted an in-depth monitoring of over 800 blocked cybercriminal Telegram channels between 2021 and 2024.
While a range of illegal activities continues to be hosted on the platform, its environment has become noticeably more challenging for sustained underground operations.
Telegram’s bot framework and other built-in features make for a low-effort ecosystem for the underworld.
A single bot can simultaneously manage queries, process cryptocurrency payments, and instantly deliver stolen bank cards, info-stealer logs, phishing kits, or DDoS attacks to hundreds of buyers per day, often without operator involvement.
Unlimited, non-expiring file storage eliminates the need for external hosting when distributing multi-gigabyte database dumps or stolen corporate documents. This frictionless automation naturally favours high-volume, low-price, low-skill offerings, such as leaked bank cards or other data, hosting malware, etc.
High-value, trust-dependent deals (for instance, zero-day vulnerability information) still remain on reputation-gated dark-web forums.
Kaspersky researchers found two clear trends related to illegal activities on Telegram. The average lifespan of shadow channels has increased, with the proportion of channels surviving over nine months more than tripling in 2023-2024 compared to 2021–2022. At the same time, Telegram’s blocking activity has risen significantly.
Monthly takedown figures recorded since October 2024 – even at their lowest – are comparable to the peak levels seen throughout 2023, and the overall pace continued to accelerate in 2025. This impedes malicious activities.
Other disadvantages of Telegram for cybercriminals include the lack of default end-to-end (E2E) encryption for chats, the inability to use their own servers for communication (due to the messenger’s centralised infrastructure), and closed server-side code, which makes it impossible to verify its functionality.
As a result, several established underground communities, including the nearly 9,000-member BFRepo group and the Angel Drainer malware-as-a-service operation, have already begun shifting primary activity to other platforms or proprietary messengers, citing repeated disruptions of their activities on Telegram.
“Fraudsters find Telegram a convenient tool for many malicious activities, but the risk-reward balance is clearly shifting. Channels are managing to stay online longer than a couple of years ago, yet the dramatically higher volume of blocks means operators can no longer count on long-term stability.
“When a storefront or service disappears overnight – and sometimes reappears only to be removed again weeks later – building a reliable business becomes much harder. We’re starting to see the early stages of migration as a direct consequence,” comments Vladislav Belousov, Digital Footprint Analyst at Kaspersky.
Galaxy Backbone Limited (GBB), the Federal Government’s leading ICT infrastructure and shared services provider, will mark its 20th anniversary in June 2026 with a grand celebration that reflects two decades of innovation, resilience, and national impact.
Since its inception in 2006, Galaxy Backbone has been at the heart of Nigeria’s digital transformation journey; building the technological foundation that supports modern government operations and public service delivery. What began as a bold vision to connect government has grown into a critical national platform that drives efficiency, transparency, collaboration and innovation across the public sector.
Over the last 20 years, GBB has helped redefine how government works. By providing secure connectivity, enterprise-grade data centre services, cloud platforms, and digital collaboration tools, Galaxy Backbone has enabled Ministries, Departments and Agencies (MDAs) to move from fragmented, paper-based processes to more integrated, technology-driven systems.
This transformation has improved government-to-government coordination, strengthened engagement with businesses, and enhanced the delivery of services to citizens. Today, the digital infrastructure powered by Galaxy Backbone supports thousands of government users, hundreds of institutions, and critical national platforms that Nigerians rely on daily.
A key part of this journey has been the Federal Government of Nigeria’s investment, managed by GBB in robust national infrastructure, high-capacity and world class data centres, fibre-optic connectivity across multiple states, secure hosting services, and shared platforms that have helped government operate more efficiently and responsively. These contributions have played a pivotal role in Nigeria’s progress toward a more digital, agile and citizen-centered public service.
Galaxy Backbone’s impact has earned both national and global recognition. In 2025, the organisation was ranked first overall in the Federal Government Website Performance Scorecard, reflecting its commitment to excellence in digital service delivery. Internationally, GBB, a couple of years ago, received the prestigious United Nations Public Service Award, a testament to its leadership in promoting a whole-of-government approach to digital transformation.
As GBB celebrates two decades of service, this milestone is more than an organisational anniversary; it is a celebration of Nigeria’s digital evolution. It is an opportunity to appreciate how collaboration between government, industry partners, technology providers, and dedicated public servants has helped build a stronger, more connected nation.
The June 2026 anniversary celebration will bring together stakeholders from across the public and private sectors to reflect on the journey so far, acknowledge the partnerships that have shaped this success, and chart an ambitious course for the future. It will highlight how collective effort, shared vision, and innovation have positioned Galaxy Backbone as a strategic national asset.
Looking ahead, Galaxy Backbone remains committed to deepening digital transformation across the country; expanding infrastructure, strengthening cybersecurity, enhancing service delivery, and supporting the Federal Government’s drive for a smarter, more efficient and digitally empowered Nigeria.
At 20 years, Galaxy Backbone stands proud of its past, confident in its present, and inspired by the limitless possibilities ahead.
Galaxy Backbone Limited (GBB), Nigeria’s leading federal ICT infrastructure provider, has announced its 20th-anniversary celebration for June 2026, marking two decades since unifying government’s fragmented digital landscape into a secure national platform.
Galaxy Backbone
The announcement by Head of Media and Corporate Communications Chidi Okpala follows GBB’s top ranking in the 2025 Federal Government Website Performance Scorecard by the Bureau of Public Service Reforms, cementing its leadership in digital service delivery and transparency.
Managing Director Professor Ibrahim Adepoju Adeyanju described the milestone as celebrating Nigeria’s shift from paper-based silos to a cloud-first, integrated government. Achievements include the UN Public Service Award for 1-GOV.net, high-speed fiber deployment for G2G and G2B interactions, IPPIS payroll rollout, and pandemic-era digital support.
The June event will gather public-private stakeholders, global tech partners, and policymakers to unveil GBB’s next-decade roadmap emphasising cybersecurity, AI in public service, and rural connectivity.
GBB positions itself at the forefront of Nigeria’s 2030 digital nation drive, with 20 years of innovation signaling a smarter, connected future.
SEC Hikes Minimum Capital Requirements for Market Operators After a Decade
Study Shows Blocks in Telegram are Pushing the Underground Out
Galaxy Backbone Marks Two Decades of Powering Nigeria’s Digital Evolution
NGX Unveils Net-Zero Plan for Greener Capital Market
Galaxy Backbone Marks 20 Years, Tops FG Website Scorecard
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
FIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack
FIRS Declares NIN, CAC Numbers as Tax IDs from 2026
US Begins Partial Visa Ban on Nigerians January 1
E-Financial3 days agoAngst as FG Demands 7.5 Percent VAT on Mobile Bank Transfers, USSD
News3 days agoMoniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline
E-Financial3 days agoThe Missing Pieces in Nigeria’s Banking Recapitalisation
E-Financial3 days agoNGX lists 3.156bn UBA shares, boosting capital to N513Bn
Telecom3 days agoGlo Unveils Immersive Gaming Experience, Travel Saga
E-Financial2 days agoPaystack Expands Beyond Payments into Banking
E-Business3 days agoHalf of Global Companies Build SOCs to Enhance Cybersecurity, with a Focus on Human Expertise
General News3 days agoNITDA DG Reaffirms Nigeria–U.S. Partnership on Data Privacy, AI and Cybersecurity