Connect with us

Telecom

Beware! Hackers Can Unlock, Steal Your Vehicles – NCC Warns Nigerians

Published

on

Kindly share this post

The Nigerian Communications Commission (NCC) wishes to alert telecom consumers and members of the public on an ongoing cyber-vulnerability that allows a nearby hacker to unlock vehicles, start their engines wirelessly and make away with the cars.

The fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this emergent danger, where hackers take advantage to unlock and start a compromised car.

According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.

With this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether. “Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly. The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.

However, the NCC-CSIRT, in the advisory, has offer some precautionary measures or solutions that can be adopted by car owners to prevent falling victim to the attack.

According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter. Additionally, vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.”
Importantly, car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.

The PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit. The RKE system, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.

Additionally, in a related advisory, the NCC, based on another detection by CSIRT, wishes to inform the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store. This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.

The malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process. Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.

As a consequence, a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.

It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible.

To avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users have been advised to avoid downloading unnecessary apps or installing apps from unofficial sources. The NCC also wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.

Conclusively, the NCC recommends that unauthorised transactions be checked against any installed app. Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Telcos Defend N6.98 USSD Charge despite Failed Transactions

Published

on

Kindly share this post

Association of Licensed Telecommunications Operators of Nigeria (ALTON), has defended the N6.98 Unstructured Supplementary Service Data (USSD), fee charged on banking transactions, insisting that the cost reflects the service provided by network operators, regardless of whether the transaction is completed.

Telcos Defend N6.98 USSD Charge despite Failed Transactions

Gbenga Adebayo, chairman, ALTON, made the clarification during a radio programme, where he addressed growing consumer complaints over what many Nigerians have described as “unfair billing” and the alleged “scam” of data expiration.

Adebayo likened the role of telecommunications companies in USSD transactions to that of a transport service provider facilitating access to banks’ digital platforms.

He said: “The phone company is like a taxi taking you to the bank’s digital office. Even if the bank’s system is down when you get there, you still have to pay the taxi man.

“Every USSD request initiated by a subscriber utilises network resources, irrespective of the outcome of the transaction on the bank’s end.

“When customers make repeated attempts due to failed transactions, telecom operators still provide connectivity for each attempt, thereby incurring operational costs,” he explained.

On the lingering dispute between telecom operators and banks over failed USSD transactions, Adebayo disclosed, “that regulators, including the Nigerian Communications Commission (NCC), and the Central Bank of Nigeria (CBN), are currently reviewing data to determine responsibility for transaction failures.

“Each time you dial a USSD code, the telco provides the access. If the bank does not complete the transaction, it does not negate the fact that the network has already been used,” he added.

The ALTON Chairman also addressed widespread dissatisfaction over data expiration, clarifying that data bundles are sold within defined validity periods and are not designed for indefinite use.

“You can’t carry it in perpetuity, but you have the benefit of extending it without losing unused portions by just resubscribing,” he said.

He explained that subscribers can retain unused data through rollover options, provided they renew their subscriptions before the expiration of the current bundle.

Adebayo further shed light on the concept of toll-free lines, noting that such services are not entirely free but are funded by the receiving organisation.

“There is nothing like free service. These are reverse charge lines where the business or government pays for the calls,” he explained, adding that economic realities have made many organisations reluctant to sustain such costs.

He noted that this has contributed to the limited availability of toll-free services in Nigeria.

While acknowledging consumer frustrations, Adebayo stressed the need for greater public understanding of how telecom services operate, particularly the cost implications of maintaining network infrastructure.

 


Kindly share this post
Continue Reading

Telecom

EU Warns Meta Could Face Huge Fine Over Underage Facebook, Instagram Users

Published

on

Kindly share this post

European Union (EU) has warned that Meta may be failing to effectively prevent children under the age of 13 from accessing its social media platforms, including Facebook and Instagram.

EU Warns Meta Could Face Huge Fine Over Underage Facebook, Instagram Users

Meta

The warning followed an investigation conducted under the Digital Services Act (DSA), which found that the company’s age-verification safeguards may be inadequate.

EU regulators said preliminary findings showed that children could easily bypass age restrictions by providing false birth dates during registration.

They also noted that tools for reporting underage users were difficult to locate and use, raising concerns about children’s exposure to inappropriate content and online risks.

EU Executive Vice-President for Tech Sovereignty, Security and Democracy, Henna Virkkunen, said platform rules should go beyond written policies.

“Terms and conditions should not be mere written statements, but rather the basis for concrete action to protect users, including children,” Virkkunen said.

Under Meta’s policies, users must be at least 13 years old to create accounts on its platforms.

However, EU officials said the company’s enforcement mechanisms appeared insufficient and did not adequately address the risks posed to younger users.

If the findings are upheld, Meta could face penalties of up to six per cent of its global annual turnover under the Digital Services Act.

The company, however, rejected the allegations, saying it already operates systems designed to detect and remove underage accounts.

Meta added that it would continue to cooperate with EU regulators on the matter.

The investigation, launched in May 2024, forms part of the EU’s wider push to strengthen oversight of major technology firms and improve online safety for children.

Regulators are also reviewing broader platform design concerns, including features they describe as potentially addictive and harmful to users’ wellbeing.

The EU is considering additional measures, including the possibility of introducing a bloc-wide minimum age restriction for social media use, amid growing pressure for tighter child safety regulations online.


Kindly share this post
Continue Reading

Telecom

Why Nigerians Still Pay N6.98 Even When Bank USSD Fails – ALTON Finally Explains

Published

on

Kindly share this post

The recent broadcast on Nigeria Radio FM 99.3, hosted by Jimi Disu, saw listeners ask Engr. Gbenga Adebayo, Chairman, Association of Licensed Telecommunications Operators of Nigeria (ALTON) on Saturday, April 25, over what many described as ‘unfair’ billing and the ‘scam’ of data expiration.

Why Nigerians Still Pay N6.98 Even When Bank USSD Fails - ALTON Finally Explains

ALTON Chairman Engr. Gbenga Adebayo

Addressing the heated matter surrounding the NGN6.98 USSD fee for banking transactions, Adebayo offered a blunt analogy to justify the cost.

He likened the telecommunications provider to a ‘taxi’ that carries a passenger to the bank’s digital front door. Defending the charge, he argued, “The phone company is like a ‘taxi’ taking you to the bank’s digital office. Even if the bank’s system is down when you get there, you still have to pay the taxi man.”

The ALTON Chairman was equally firm on the matter of data expiration, a major point of friction for Nigerian consumers. He clarified that data plans are sold within specific subscription windows, such as 7 or 30 days, and are not designed to be held in perpetuity.

Addressing this directly, he told listeners, “You can’t carry it in perpetuity… but you have the benefit of extending it without losing unused portions by just resubscribing.” He explained that subscribers can indeed keep their unused data through ‘rollover’ benefits, provided they resubscribe to a new plan before their current bundle officially lapses.

The dialogue moved to the issue of toll-free lines, with Adebayo explaining the technical reality of toll free numbers.

He noted that ‘nothing is free,’ rather, these are “reverse charge lines” where the business or the government absorbs the cost so the caller does not have to pay.

In Nigeria’s current economic climate, fewer businesses are willing to pay for these calls, leading to a shortage of truly free lines for consumers.

This financial burden is part of the broader “opportunity cost” analysis that consumers must understand when comparing Nigerian services to international standards.

Data provided during the broadcast also shed light on the dispute between telcos and the banking sector. Adebayo revealed that the NCC and the CBN are currently reviewing data to determine which party is responsible for failed transactions.

He noted that when a user attempts a USSD transaction multiple times, the telco provides the connection for every single attempt. If the bank’s system fails to complete the transaction, the telco has still expended resources to provide the link, which is why the N6.98 charge is applied for the access provided.

In his concluding remarks, Adebayo urged for more public enlightenment to bridge the gap between consumer frustration and technical realities.

He stressed that while the NCC continues to impose fines and penalties on operators for quality lapses, these fines do not actually solve the underlying problems of power failure and vandalism.

For service to truly improve, there must be a collective effort to protect the network from physical harm and a better understanding of the business models that keep Nigeria connected.


Kindly share this post
Continue Reading

Trending