Connect with us

Telecom

Cyberespionage: NCC Warns of Iranian Hacking Group Targeting Telcos, ISPs

Published

on

Kindly share this post

The Nigerian Communications Commission (NCC) has again notified the general public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.

This is inline with the commission’s commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected.

The warning was contained in a statement released by Dr. Ikechukwu Adinde, Director, Public Affairs, NCC, on Monday in Abuja.

According to the statement, “An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage”.

Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.

According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.

The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.

By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.

Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s back doors, consisting of over 20 domains, including six that were previously not associated with the threat actors.

According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization.

The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.

However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.

Specifically, telecom consumers and the general public are advised to:

1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).

2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.

3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.

4. Implement the use of Intrusion Prevention Systems that monitors your network.

5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.

6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.

7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.

For further technical assistance, contact ngCERT on [email protected].

The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space.

This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.

 

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers

Published

on

Kindly share this post

Bosun Tijani, minister of Communications, Innovation and Digital Economy, yesterday claimed that bandits and terrorists are able to communicate and coordinate their activities with ease because they exploit gaps in the country’s telecommunications network.

Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers

Bosun Tijani, minister of Communications, Innovation and Digital Economy,

Tijani, who spoke  Politics Today, a Channels Television’s programme, on Friday, Tijani said the criminals exploit gaps in the country’s telecommunications network.

He also claimed the bandits use advanced technology to bounce calls across multiple towers in areas with poor connectivity.

“They weren’t using the normal towers; they bounced calls off multiple towers, which is why they favor areas that are largely unconnected,” he said.

When asked about reports that unregistered or fraudulently registered SIM cards are still in use despite the Bank Verification Number (BVN) and the National Identification Number (NIN)–Subscriber Identity Module linkage policies, Tijani said the issue is technically complex and the reports are not fully verified.

“Whether it’s fact or not, I do not know where you’re getting that from, and I do not know who has evidence that there are people with unregistered SIMs,” he added.

The minister stated that the federal government is investing in telecom towers in underserved regions, upgrading the country’s communication satellites to improve coverage, and expanding fiber-optic networks to strengthen the country’s digital infrastructure.

“If our towers are not working, our satellites will work. Nigeria is the only country in West Africa with communication satellites, and we are bringing new satellites to upgrade their capabilities,” Tijani said.

He added that these initiatives aim to ensure better connectivity for Nigerians while closing loopholes that criminals exploit, thereby enhancing national security.

The minister’s comments come amid rising concerns over insecurity in several parts of the North, where banditry, kidnapping, and terrorism have escalated in recent years.

There are also reports of bandits flaunting ransom payments on social media platforms such as TikTok, raising alarm among authorities and the public


Kindly share this post
Continue Reading

Telecom

CBN, NCC to Launch Short Code for Swift Consumer Complaint Resolution

Published

on

Kindly share this post

Central Bank of Nigeria (CBN) on Thursday announced plans to partner with the Nigerian Communications Commission (NCC) to develop an industry-wide short code for consumers to lodge complaints with financial institutions anytime, anywhere, even without internet access.

CBN, NCC to Launch Short Code for Swift Consumer Complaint Resolution

CBN

Dr Aisha Isa-Olatinwo, CBN Director, Consumer Protection and Financial Inclusion Department, disclosed this at a virtual Consumer Protection Town Hall meeting titled “Ask the Regulator”, organised by Enhancing Financial Inclusion and Advancement (EFInA).

She said the initiative addresses challenges faced by vulnerable consumers using feature phones who often have to visit bank branches physically to report issues amid the convergence of telecom and banking services.

Isa-Olatinwo said the CBN had achieved 94 per cent month-on-month timely resolution of consumer complaints, adding that the apex bank had streamlined processes and partnered with banks to balance consumer protection with financial system stability.

An EFInA poll presented at the event revealed that 61 per cent of respondents experienced failed transactions in the past 12 months, while 26 per cent had reversals within 24 hours and 54 per cent between 24 and 48 hours.

Other complaints included six per cent for fraud, 14 per cent for hidden charges and 15 per cent for poor customer service, with 66 per cent of respondents aware of complaint escalation steps.

President of Consumer Advocacy Foundation of Nigeria (CAFON), Mrs Sola Salako-Ajulo, lamented that consumers often feel unprotected and urged introduction of fraud insurance for instant reversals, shifting the burden of proof from customers.

She said: “What is missing in our system—unlike more developed economies—is fraud insurance, where banks reverse reported fraud immediately, refund consumers, and investigate later.”

Mr Ajibade Laolu-Adewale, Chairman of Committee of e-Business Industry Heads (CeBIH), represented by Mr Adeyemi Salisu, stressed that banks must resolve disputes between acquiring and issuing banks without redirecting customers to merchants.

The short code initiative is expected to enhance financial inclusion by providing accessible redress mechanisms in Nigeria’s evolving digital payment ecosystem.


Kindly share this post
Continue Reading

Telecom

Google.org Backs CyberSafe’s Resilio Africa to Shield 2m People from Cyber Threats

Published

on

Kindly share this post

CyberSafe Foundation, with funding support from Google.org will launch Resilio Africa, a 3-year cybersecurity resilience project that aims at reducing the growing risks of cyberattack in institutions and communities across Sub-Saharan Africa.

Google.org Backs CyberSafe’s Resilio Africa to Shield 2m People from Cyber Threats

CyberSafe

The project will strengthen the cyber resilience of 200 Critical Community Institutions (CCIs) in the region through provision of free technical tools, assessments, threat intelligence and incident response frameworks. With this intervention, Resilio Africa aims to protect over 2 million people and secure more than 15 million public records in Nigeria, Kenya, Ghana, and South Africa, marking one of the most ambitious community-building efforts in Africa’s cybersecurity ecosystem.

“At Google.org, we believe that access to secure digital systems is a cornerstone of inclusive growth,” said Haviva Kohl, Senior Program Manager, Google.org. “Our support for CyberSafe Foundation’s CCI cybersecurity efforts reflect our shared commitment to empowering communities and protecting the institutions that serve them. Resilio Africa will help ensure that essential community organizations can operate safely and confidently in an increasingly digital world.”

Identifying the challenges across sub-Saharan Africa, a brief by CyberSafe Foundation noted that critical community infrastructure in the region is increasingly targeted by cyberattacks, with inadequate resources available to tackle them. “These institutions collect, process, and store vast amounts of sensitive personal

data, yet most lack the corresponding cybersecurity maturity. Many operate on outdated systems, with limited cybersecurity capacity, low awareness of digital threats, and zero security budgets. According to INTERPOL, Africa experienced a 23% increase in ransomware attacks in 2023, with public and nonprofit institutions among the most impacted.”

Further citing data from the International Telecommunication Union (ITU)’s Global Cybersecurity Index, the statement said that more than 60% of African countries fall into the “low commitment” category regarding national cybersecurity readiness. This contributes to limited institutional cybersecurity capacity, low awareness of digital threats, and little to no dedicated security budgets.

“As services become more digitized, this creates a dangerous gap that cybercriminals are actively exploiting through ransomware, phishing, data breaches, and DDoS disruptions, compromising public services, exposing sensitive data, and eroding public trust,” it said.

“In Kenya alone, over 114 CCI-targeted cyberattacks were recorded in the first eight months of 2024, followed by a 201% increase in cyber incidents by Q1 2025. In Nigeria, key government and healthcare systems still operate over unencrypted communication protocols. Institutions in Ghana and South Africa face similar threats but often lack the capacity to respond effectively. This widespread vulnerability exposes millions of citizens to both digital and physical harm.

Despite emerging national strategies, policy formulations and growing political will in the region, most CCIs are under-resourced and under-protected. Without immediate, scalable, and context-specific interventions, the region risks a surge in cyber incidents that could significantly disrupt essential community services.

Resilio Africa will strengthen cyber resilience of 200 CCIs through technical tools, assessments, customized playbooks and incident response frameworks; provide over 10,000 hours of pro bono cyber consulting to support CCI teams, build human capacity by delivering tiered training for executives, IT teams, and general staff with over 4500 employees and decision-makers trained; protect over two million people; and secure more than 15 million public records in Nigeria, Kenya, Ghana, and South Africa.

“Africa’s digital transformation cannot succeed if our communities remain vulnerable,” said Confidence Staveley, Founder and Executive Director of CyberSafe Foundation.

“With Google.org’s support, we are scaling a proven model of capacity-building that will help critical institutions become resilient, safeguard the people they serve, and preserve trust in digital public systems.”

Application to the initiative is open and CCIs eligible to participate are to complete an online interest form guided by instructions on the website, www.resilio.cybersafefoundation.org.


Kindly share this post
Continue Reading

Trending