Telecom
Cyberespionage: NCC Warns of Iranian Hacking Group Targeting Telcos, ISPs

The Nigerian Communications Commission (NCC) has again notified the general public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.
This is inline with the commission’s commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected.
The warning was contained in a statement released by Dr. Ikechukwu Adinde, Director, Public Affairs, NCC, on Monday in Abuja.
According to the statement, “An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage”.
Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.
According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.
The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.
By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).
Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.
Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s back doors, consisting of over 20 domains, including six that were previously not associated with the threat actors.
According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization.
The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.
However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.
Specifically, telecom consumers and the general public are advised to:
1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
4. Implement the use of Intrusion Prevention Systems that monitors your network.
5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.
For further technical assistance, contact ngCERT on incident@cert.gov.ng.
The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space.
This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.
Telecom
Anambra Cracks Down on Illegal ISPs, Cites Security, Service Concerns

Anambra State Government has begun a crackdown on illegal Internet Service Providers (ISPs) operating across the state, citing concerns over data breaches, poor service quality, and environmental defacement.
The enforcement, led by the Anambra State Physical Planning Board (ANSPPB) and the Anambra State ICT Agency, follows numerous complaints about unauthorized road excavations and the indiscriminate erection of poles, which deface infrastructure.
Investigations revealed that several ISPs were operating without approval or submitting deployment plans, a violation of regulations governing telecommunications infrastructure.
Authorities stress that the objective is not exclusion but compliance, ensuring only registered ISPs approved by the Nigeria Communications Commission (NCC) operate in the state.
Residents are urged to report unlicensed ISP activities via the dedicated hotline 02014143039.
Speaking on the development, Barr. Chike Maduekwe, Executive Chairman of ANSPPB, said: “This isn’t about shutting anyone out but about ensuring everyone follows the right process. If you want to offer internet services in Anambra, go through the proper channels. We will support those who comply, but we will not tolerate shortcuts.”
Similarly, Chukwuemeka Fred Agbata (CFA), Managing Director/CEO of the Anambra State ICT Agency, emphasized: “The internet is no longer a luxury—it’s a necessity. Governor Soludo has implemented a zero right of way policy to encourage players, but the first step for any ISP must be regulatory approval. The people of Anambra deserve services from providers they can trust.”
The Anambra State Government remains committed to fostering a safe, fair, and well-regulated digital landscape where residents can enjoy secure, high-quality internet services without fear of exploitation.
The enforcement drive signals a new era of accountability in the state’s fast-growing digital space.
Telecom
Instagram Unveils Teen Safety Features in Nigeria

In a significant step towards enhancing online safety for teenagers, Meta is proud to announce the launch of Teen Accounts on Instagram in Nigeria. This initiative is part of Meta’s broader commitment to ensuring safe, private, and positive online experiences for teens across Africa.
As more Nigerian teens join Instagram, it is crucial to prioritise their safety and privacy. Parents want to feel confident that their teens can use social media to connect with their friends and explore their interests, without having to worry about unsafe or inappropriate experiences.
Teen Accounts were designed to better support parents and give them peace of mind that their teens have the right protections in place. Teen Accounts have built-in protections that limit who can contact them and the content they see, and we’ll automatically place teens in Nigeria into Teen Accounts, and teens under 16 will need a parent’s permission to change any of these settings to be less strict.
Key protections offered with Teen Accounts include:
Private Accounts: Teen accounts are set to private by default and teens under 16 can only change this setting with parental guidance.
Messaging Restrictions: Teens can only receive messages from people they are already connected to.
Sensitive Content Control: Teen Accounts are automatically set to see less sensitive content in search results and recommended content in Explore, Feed and Reels.
Limited Interactions: Teens can only be tagged or mentioned by people they follow, and the strictest anti-bullying feature, Hidden Words, is enabled by default.
Time Limit Reminders: Notifications prompt teens to exit the app after 60 minutes of daily usage.
Sleep Mode: Enabled from 10 PM to 7 AM, this feature mutes notifications and sends automatic replies to DMs overnight.
“We’re excited to bring these features to Nigeria and help families navigate online spaces safely. Teen Accounts are designed to give parents peace of mind, allowing teens to connect with friends and explore interests without worrying about unsafe experiences,” said Sylvia Musalagani, Safety Policy Manager, Africa, Middle East & Turkey (AMET) at Meta.
Since Meta started reimagining its apps for teens with Teen Accounts globally in September 2024, Meta has enrolled 54 million teens into Teen Accounts on Instagram, with 97% of those aged 13–15 remaining within the strict default protective settings.
While Teen Accounts come with built‑in safety protections, Meta understands many parents want to take a more active role in their teens’ online experiences. With the enhanced supervision tools, parents can:
See who their teen has interacted with: While message content remains private, parents can now view a list of people their teen has messaged over the past seven days.
Set daily time limits on Instagram: Parents can decide how long their teen can spend on the app each day. Once the limit is reached, Instagram will be inaccessible for the rest of the day.
Schedule downtime from Instagram: Parents can block access to Instagram during specific hours, like bedtime, with just a tap.
View the topics their teen is exploring: Parents can see which age-appropriate interest areas their teen is choosing to follow and engage with.
“Meta’s new policy aligns with several core priorities outlined in NITDA’s strategic roadmap, particularly concerning data privacy and protection for minors, now under the purview of the Nigerian Data Protection Commission, and child online protection and digital well-being, which we have collaboratively addressed with our sister agency, the Nigerian Communications Commission.
“NITDA has been a strong advocate for child online protection through various initiatives, including national strategies and proposed legislation, such as the Online Harms Protection Bill, which addresses age verification and parental controls.
“This policy reinforces the need for age-appropriate online experiences and promotes digital well-being.” commented, Barr. Emmanuel Edet – Director Regulations and Compliance Department, NITDA
To mark the launch, Meta hosted an exclusive event where parents, content creators, policy stakeholders, media and teens could engage on the available safety features and tools.
Meta remains committed to developing tools, resources and partnerships that protect teens and foster safer online experiences for families in Nigeria.
For more information about Teen Accounts and updates to parental supervision tools, visit here
Telecom
Telcos Threaten to Disconnect Banks over Misinformation on New USSD Charges

Telecommunication companies have threatened to withdraw their Unstructured Supplementary Services Data (USSD), services from banks over what they called misinformation.
MTN Nigeria, Airtel, Globacom and 9Mobile- the telcos disclosed that the banks’ notice to their customers on the new billing system and airtime deductions for USSD services was misleading.
Also, Association of Licensed Telecom Operators of Nigeria (ALTON) also denied that the directive was from the Nigerian Communications Commission (NCC).
USSD is done via shortcodes on mobile phones and allows bank customers to make transactions in places with limited or no internet service.
Recall that banks earlier this week claimed that NCC has directed them to begin charging them from their airtime rather than from customers’ accounts.
The notice from the banks read in part: “In line with the directive of the Nigerian Communications Commission (NCC), please be informed that effective June 3, 2025, charges for USSD banking services will no longer be deducted from your bank account.
“Going forward, these charges will be deducted directly from your mobile airtime balance in accordance with the NCC’s End-User Billing (EUB) model.
“Under this new billing structure, each USSD session will attract a charge of ?6.98 per 120 seconds, which will be billed by your mobile network operator.
“You will receive a consent prompt at the start of each session, and airtime will only be deducted upon your confirmation and availability of the bank to fulfil this service.
“If you do not wish to continue using USSD banking under this new model, you may choose to discontinue use of the USSD channel.”
Reacting, ALTON, umbrella body of telecom operators in Nigeria, said the banks’ notice is a gross misinformation deliberately hatched to suit their selfish interests.
Hence they threatened to withdraw network support to the banks’ USSD services.
Engr Gbenga Adebayo, chairman of ALTON told Vanguard: ” I don’t understand why the banks are twisting agreements and distorting information just to favour their selfish interests. In the first place, the information wasn’t a directive from the NCC but a joint regulatory agreement between the NCC and the Central Bank of Nigeria, CBN witnessed by the telcos and the banks. The agreement was that if the banks finally cleared all USSD debts owed to the telcos by June 2, 2025, they are free to migrate to the end-user billing method, so long as the model of migration is transparent and agreed upon by the telcos.
“The reason for that clause was because the telcos insisted that the process of migration is such that will not allow a customer to be billed twice; in other words, that a subscriber would not have his airtime deducted and also have his or her money deducted for same services from his or her bank account.
” As we speak, some of the banks have cleared their debts, but the majority are yet to do so. So, even if all the modalities of migrating to end-user billing have been perfectly carried out, the implementation cannot even begin because the banks are yet to clear the USSD debt owed to the telcos.
“Our position now is that if that is the way the banks want to treat the agreement, we may withdraw support for their USSD services. It is not a must-have. They can do without it. But, they should clear the debts as agreed,” he added.
- E-Business2 days ago
AXIAN Telecom Invests in Jumia Post-MTN Era
- E-Financial2 days ago
UBA Compiles with NCC, to Deduct USSD from Customers’ Accounts
- E-Business2 days ago
Nigeria Strengthens Cybersecurity, Launches National Cleanup Plan
- News2 days ago
ARCON to Crackdown on AI-Generated Fake Ads
- Telecom2 days ago
Union Bank and PAPSS Revolutionize Cross-Border Payments
- News2 days ago
FG, UNICEF Partner to Train 20m Youths on Digital Skills
- Telecom2 days ago
MTN Nigeria Unveils 21 Days of Y’elloCare to Empower Communities through Digital Tools
- General News2 days ago
Report Shows AI Curiosity Among Children more than Doubled in 2025