Telecom
Cyberespionage: NCC Warns of Iranian Hacking Group Targeting Telcos, ISPs
The Nigerian Communications Commission (NCC) has again notified the general public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.
This is inline with the commission’s commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected.
The warning was contained in a statement released by Dr. Ikechukwu Adinde, Director, Public Affairs, NCC, on Monday in Abuja.
According to the statement, “An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage”.
Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.
According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.
The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.
By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).
Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.
Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s back doors, consisting of over 20 domains, including six that were previously not associated with the threat actors.
According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization.
The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.
However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.
Specifically, telecom consumers and the general public are advised to:
1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
4. Implement the use of Intrusion Prevention Systems that monitors your network.
5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.
For further technical assistance, contact ngCERT on [email protected].
The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space.
This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.
Major social media giants Meta Platforms, TikTok and Alphabet’s YouTube will face a landmark jury trial this week in Los Angeles County Superior Court over allegations that their addictive designs have fuelled a youth mental health crisis, marking the first such case to reach this stage.
Social Media
The pivotal personal injury lawsuit centres on a 19-year-old Californian woman identified as K.G.M., who claims her childhood immersion in Instagram, Facebook, YouTube and TikTok—engineered with endless scrolls, autoplay videos, notifications and algorithms—sparked severe anxiety, depression and suicidal thoughts.
Dozens of similar suits have surged since 2022 from families, schools and states, accusing the firms of burying internal research on teen harms while prioritising ad revenue through youth-targeted engagement hooks, despite Section 230 protections for user content.
Plaintiffs seek damages and design overhauls, arguing platforms bypassed parents and preyed on vulnerable kids; defendants counter there’s no clinical “social media addiction” diagnosis, no proven causation—kids with issues often use less—and they’ve added safeguards like parental controls and time limits.
Echoing Australia’s under-16 bans, the trial will scrutinise thousands of internal documents, expert testimonies and K.G.M.’s story, potentially expanding tech liability amid debates where studies show complex links, not direct causation, between screen time and disorders like eating issues or self-harm.
A win could mandate warning labels, age gates or algorithm tweaks, reshaping global platforms as U.S. Surgeon General advisories and global scrutiny intensify pressure on Big Tech to prioritise child safety over profits.
Meta is gearing up to trial paid subscription services on Instagram, Facebook, and WhatsApp, aiming to diversify revenue streams beyond advertising while maintaining free core access for all users.
Meta
The subscriptions will offer enhanced tools tailored for everyday users, creators, and businesses, including advanced content creation, sharing, and workflow features distinct from the existing Meta Verified verification program. Unlike a uniform rollout, Meta plans varied testing formats per app to match diverse audiences, experimenting with feature bundles based on user feedback to refine the model.
A key element involves integrating Manus, the autonomous agent firm Meta acquired for $2 billion in December, into these apps alongside its enterprise sales. Manus enables complex task automation with minimal input, with early signs like Instagram shortcuts already spotted by reverse engineer Alessandro Paluzzi.
Video tools feature prominently: Meta’s Vibes short-form video generator in the Meta AI app shifts to freemium, where paid tiers unlock higher monthly creation limits beyond the free baseline. On Instagram, subscriptions could enable unlimited audience lists, non-follower tracking, and anonymous Story views, though specifics for Facebook and WhatsApp remain under wraps.
Drawing from Meta Verified’s 2023 launch—which provides badges, support, and protection mainly for creators—these broader plans target wider appeal amid industry shifts. Ad growth slows against TikTok competition, while Snapchat+ boasts 16 million subscribers at $3.99 monthly, proving demand for value-driven paid perks despite subscription fatigue risks from streaming and storage fees.
Meta will phase tests gradually, prioritizing feedback to shape long-term viability without alienating free users.
The International Rescue Committee (IRC) has announced the formation of Airbel Ventures, a new humanitarian impact investing fund aimed at accelerating the introduction and scaling of breakthrough technologies in crisis-affected communities.
The fund will invest in companies whose ideas have the potential to change humanitarian response, including digital infrastructure for frontline health systems and climate-resilient agriculture.
The launch of Airbel Ventures follows a period of rapid innovation at the IRC, despite the humanitarian sector facing record funding cuts.
In the past year, the IRC’s Airbel Impact Lab has advanced more than twenty Artificial Intelligence (AI) and technology initiatives—from anticipatory action tools powered by climate and vulnerability data, to frontline service delivery using safe, orchestrated AI systems, to breakthrough diagnostic tools for emerging diseases.
Airbel Ventures’ first impact investment is in Signalytic, a company delivering solar-powered computing devices that ensure reliable electricity and connectivity for remote health facilities.
Following the investment, the IRC will pilot Signalytic’s technology with its Nigeria Health team, demonstrating the viability of next-generation digital infrastructure in humanitarian settings.
“We know breakthrough solutions already exist—what’s missing is the path to scale in humanitarian contexts,” said Dr. Jeannie Annan, Senior Vice President for Research & Innovation at the IRC and head of the Airbel Impact Lab.
NITDA, NBC Explore Strategic Collaboration on Digital Transformation, Media Regulation
Gold Hits Record $5,110/Ounce Amid Trump Tariff Threats, Geopolitical Fears
TikTok, Instagram Blamed in US Youth Suicide Lawsuit
Meta Tests Paid Subscriptions Across Instagram, Facebook, WhatsApp
PayPal Goes Live in Nigeria Through Paga
19 Nigerian Banks Meet CBN Recapitalization Targets Ahead of March Deadline
Jumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity
Galaxy Backbone Celebrates the Federal Government’s Paperless Civil Service Milestone
DStv Offers Instant Package Upgrade for Customers from January to February
Banks to Impose N50 Stamp Duty on Transfers of N10,000 and Above from January 1
News2 days agoLIRS to Invoke NTAA to Recover Unpaid Taxes from Bank Accounts, Others
News2 days agoAnambra Cuts Monday Pay to Kill Sit-at-Home
E-Financial2 days agoFirst Asset Management Receives Upgraded Ratings from Agusto &Co and DataPro
General News2 days agoNigeria Treats Religious Violence as Attack on State – NSA Ribadu
E-Financial2 days agoNIBSS, Others Flag 13,417 Nigerian Fraudsters on Person of Interest Portal
E-Financial2 days agoCBN Prepares Fresh Debit Card Rules to Improve ATM Services
News1 day agoTech Executives Double Down on AI, Talent and Adaptive Strategies to Lead in the Intelligence Age
E-Financial1 day agoCBN Upgrades Licences of Opay, Moniepoint, Kuda, Palmpay, Paga to National Status