News
DSS Accuses APC of Plot to Hack into INEC Database

Department of State Services (DSS) has said that its findings from the search of the Lagos office of the All Progressives Congress (APC) in November last year, alleging, among others, that the party planned to hack into the database of the Independent National Electoral Commission (INEC) to manipulate records.
Marilyn Ogar, DSS deputy director (Public Relations), said at a media briefing yesterday in Abuja, that after preliminary investigations, the DSS “suspects there was an elaborate and well articulated plan to inflate the party’s membership data as well as hack into INEC voter registration database.”
APC however dismissed the findings as hogwash, a great disservice to Nigeria and an embarrassment to all intelligence-gathering organisations around the world.
But Ogar said the raid on the APC’s office was carried out after a tip off that some cloning activities were going on in a building located at No. 10, Bola Ajibola Street, Ikeja, Lagos, without a signpost, banner or flag to indicate that it was a party office.
She said a permit was obtained for the operation during which the DSS officials found some items, which suggested that there was a well-hatched plan to hack into the electoral body’s database and corrupt it “and replace it with their own data.”
The DSS said that from its findings, the APC plans to scythe the system in a way that would enable them to manipulate even media reports in a predetermined direction. Ogar explained that a well articulated manual to perform all these tasks were served on the hard drive recovered from the office.
She listed the items recovered from the APC’s office as “a temporary voter’s card, a permanent voter’s card and some hard drives (one of the hard drives recovered from the building contained a video of twenty-one (21) hacking tutorials.)’’
According to the DSS, the tutorial video focused on how to become a hacker and steps to take to avoid detection in the process of hacking web servers, steps and procedures of system hacking, passwords cracking, decrypting, escalating access privileges, and creating backdoors to servers.
Ogar said the video “also explicitly explained how to evade security of databases such as Intrusion Detection Systems (IDS), firewalls and other measures put in place to deter hackers.
“The video outlined ways to identify vulnerabilities in systems and how to surreptitiously drop a USB flash drive in a target establishment, which when plugged into any computer, transmits malicious codes enough to gain access into and compromise the entire system of the target organisation. And how to hack into the systems of media houses, with the aim of broadcasting fake stories or headlines.”
While displaying pictures of underaged Nigerians allegedly registered as members of the APC, Ogar said registering underaged and infants as party members is contrary to the party’s constitution as contained in Article 9.1 which states that “membership of the party shall be open to any citizen of Nigeria who has attained the age of eighteen (18) years…”
The DSS alleged that: “Furthermore, the APC had multiple registrations of individuals in multiples of 16, 12, and 10.”
According to the DSS spokesperson, it was also discovered that some foreigners as well as security operatives were registered members of the party thereby putting a question mark on their understanding of the legitimate provision that all security personnel in the country must not be or be seen to be partisan.
“The APC registered several security personnel from the Nigerian Army (NA), the Nigeria Police Force (NPF), Nigeria Customs Service (NCS), Nigerian Security and Civil Defence Corps (NSCDC) and Federal Road Safety Corps (FRSC), among others, in their uniforms as members of the party. Several foreigners were also registered as its members,” the agency revealed.
The DSS expressed concern that the APC filled forms without passport photographs, and have books containing names of people with their phone numbers, as well as several envelopes containing passport photographs of various individuals.
While stating the position of the DSS that APC has plans to infiltrate the database of the electoral body “through the creation of party membership forms and cards to match INEC’s voters’ register across the country,” Ogar reiterated that the opinion expressed by some people “on the action of the service” cannot conceal the sacrosanct of truth.
It would be recalled that when the said residence was raided last year, some officials of APC were arrested and detained by the DSS. The party, through its spokesman, Lai Mohammed, came out with a statement demanding public apology from the service and immediate announcement of its findings.
He further accused the service of seeking to manufacture evidence to support its alleged faulty intelligence by delaying the announcement after a number of days.
Mohammed was quoted to have then said: “We are now asking them to immediately announce their findings to the world. After all, it took them only a few hours after their Gestapo-like invasion of our offices before they issued their baseless allegation of PVC cloning to justify their action.”
Ogar said those arrested have being released on bail, investigation is still continuing, as the DSS would take more evidences and the information acquired from some of the suspects to court for further litigation.
In a statement issued in Abuja yesterday by Mohammed, APC also alleged that the timing of the release of the ‘findings’ was a plot orchestrated in collusion with the Peoples Democratic Party (PDP) to distract the APC from its ongoing campaigns for next month’s elections.
It described as disingenuous, flimsy, premeditated, partisan and an irritant the conclusion that the APC had an ‘’articulated plan to inflate the party’s membership data as well as hack into INEC’s voters’ registration database through the creation of party membership forms and cards to match INEC’s voters’ register across the country.’’
The APC statement reads in part: ‘’First the DSS and the PDP said the APC was cloning Permanent Voters Cards at the raided office, without a shred of evidence. Now, after a ‘painstaking’ investigation, the DSS has found out that the APC was only planning to inflate its membership data and then hack into INEC’s database. And this is the outcome of its massive, months-long investigations?
‘’This would have been funny if it were not from a primary domestic intelligence agency saddled with a great responsibility. Can this wishy-washy report stand any serious scrutiny? Can any serious intelligence gathering agency anywhere else in the world take this report seriously? With these kind of findings, one can now understand why Boko Haram has continued to strike at times and places of its own choosing without any prior knowledge by our all-powerful DSS.
‘’We have always warned that our democracy is in clear and present danger, not just from desperate politicians, but also from institutions of state that have compromised in their roles and resorted to crass lawlessness. The DSS’ ‘findings’ today have given us another reason to repeat this.”
‘’While we are willing to meet the DSS in court, we can confidently say that the ‘confessions’ extracted from the arrested persons, after they were subjected to incredible acts of torture, cannot even stand in any court of law,’’ APC said.
News
Joshua Ichor, Nigerian Innovator Bags Europe’s €60m Fellowship

Joshua Ichor, a Nigerian geoscientist and innovator, has secured a rare invitation into the prestigious EWOR Fellowship, one of Europe’s most selective founder programmes built for outlier entrepreneurs with the potential to create billion-euro companies.

Joshua Ichor
The invitation places Ichor inside EWOR’s elite founder ecosystem, a powerful European platform associated with a reported €60 million commitment to backing exceptional founders building the next generation of globally significant companies.
EWOR describes itself as a fellowship for founders who “think in decades and build in days.” The platform says it backs the top 0.1% of founders building potential €10 billion+ companies, with mentorship from unicorn-builders and a founder-first model designed for exceptional entrepreneurs.
For Ichor, the selection is more than another milestone. It is a signal that one of Europe’s most ambitious founder networks sees major global potential in the Nigerian innovator.
While the technology Ichor is currently building has not been disclosed to the public, sources close to the development describe it as a powerful and ambitious piece of technology with the potential to scale internationally.
The project remains under wraps as Ichor continues to refine the product, strategy, and long-term market direction.
According to the fellowship invitation, EWOR believes Ichor is among the few founders with what it takes to build a company that could be valued at €1 billion or more.
That belief places him in a rare class of founders being watched not only for what they have done, but for what they are quietly building next.
EWOR has earned attention for its radical selectivity and founder-first approach.
Its own platform highlights a 0.1% acceptance rate, describing the fellowship as a community of outlier founders who push and sharpen one another.
EWOR’s public materials also reference the fellowship as “Harder than Y Combinator,” built by unicorn founders for founders seeking a higher level of ambition.
The fellowship connects selected founders with a powerful network of unicorn builders, investors, and operators.
Ichor is expected to build alongside a high-calibre founder community that includes names such as Ricky Knox, known for two nine-figure exits; Andrew Nutter, associated with a €180 million revenue company and Sequoia Scout experience; Nick D’Aloisio, widely known for achieving a major technology exit as a teenager; and Jörgen Tveit, who raised one of Europe’s biggest-ever pre-seed rounds by a first-time founder.
The EWOR ecosystem also gives founders access to sessions with globally recognized operators and investors, including Fabrice Grinda, founder of OLX; Kevin Hartz, founder of Eventbrite and Xoom; Mark Ghermezian, founder of Braze; and Michael Baum, founder of Splunk.
For a Nigerian geoscientist to enter this circle is a major statement. It shows that African technical talent is increasingly stepping into the same rooms as some of the world’s most ambitious venture-backed founders.
Ichor’s current technology remains confidential, but the conviction from EWOR suggests that the opportunity is significant.
The details are not yet be public, but the direction is clear: Joshua Ichor is building something with global ambition.
EWOR’s wider network includes some of the world’s leading startup investors and venture names, including A16Z, Accel, Atomico, Balderton, Earlybird, EQT, FJ Labs, Lakestar, Sequoia, Speedinvest, World Fund, and others.
Its platform says fellows raise at 50–300% higher valuations than average, further underlining the strength of the ecosystem around selected founders.
News
More than 50 Percent of Leaked Passwords End with a Number – Research Reveals

To mark the occasion of World Password Day, Kaspersky experts analysed 231 million unique passwords in major password leaks from 2023 to 2026, and uncovered several key patterns.

First, 68% of modern passwords can be cracked within a day. Second, it turned out that the vast majority of compromised passwords either begin or end with a digit – a common pattern that makes them potentially vulnerable to brute force attacks.
And third, users also favour positive and trending words; for example, over the past couple of years, use of the word “Skibidi” in analysed passwords surged 36 times, mirroring the rise of that Internet trend.
In recent years, secure passwords’ rules have become a widely discussed topic. More and more services now demand passwords that are at least 10 characters long, include an uppercase letter, and contain a number or a symbol.
Yet a comparative analysis of leaked passwords from the past few years shows that even following some of those rules does not guarantee resistance to brute‑force or AI‑driven attacks.
Kaspersky experts share practical advice on how to make passwords more complex and secure, and how not to repeat common mistakes.
Be creative with using symbols and numbers
Among the leaked passwords that contain just one symbol, the “@” sign tops the list, appearing in 10% of cases. The next most common symbol is a dot (.), found in 3% of passwords. Among all analysed passwords “@” takes second place in terms of prevalence, and in third place is “!”.
Numbers also follow similarly predictable patterns:
53% of examined passwords end with digits;
17% begin with digits;
Nearly 12% include a numeric sequence that resembles a date (from 1950 to 2030);
3% of leaked passwords include keyboard sequencies like “qwerty” or “ytrewq”, but most of them are digital sequencies like “1234”.
Alexey Antonov, Data Science Team Lead at Kaspersky, notes that commonly used symbols, numbers, or dates – especially when placed in obvious positions (such as at the beginning or end of a password) – significantly simplify brute force attacks for cybercriminals. That’s why it’s highly recommended to give preference to less popular characters, and avoid numeric or keyboard sequences.
“Bruteforce works by systematically trying every possible character combination until the correct password is found. When attackers already know which characters users tend to favour, the time required to crack a password drops dramatically. To avoid the temptation of choosing predictable symbols, entrust password creation to dedicated generators that produce random letters, numbers, and symbols with equal probability”, says Alexey Antonov.
Between… Eden and hell: Try to avoid using words in a password
The research shows that emotional and trending words frequently become the basis for a password. For example, from 2023 to 2026 the use of the word “Skibidi” in passwords increased 36 times – mirroring the rapid rise of that Internet trend.
Kaspersky experts have also conducted analysis of the occurrence of positive and negative words in passwords, and it turned out that there are more positive ones. Among those regularly appearing are positive words like “love”, “magic”, “friend”, “team”, “angel” and “star”, “eden”. Interestingly, positive words are much more common than negative ones. However, words like “hell”, “devil”, “nightmare” and “scar” also occur.
“Using a single‑word password, even with a trailing number or a special character, is a weak choice. The pattern is too predictable, making it easy for attackers to guess. Instead, craft a passphrase that strings together several unrelated words, each supplemented with internal numbers and symbols, and sprinkle in a few intentional misspellings.
The longer and more random and unpredictable the password is, the harder it is to crack. As an additional way to protect yourself, enable two-factor authentication (2FA) wherever possible,” recommends Alexey Antonov.
Is password length important?
It’s well known that longer passwords are harder to crack, and the analysis of leaked passwords confirms this principle. However, with the rise of AI driven tools, length alone no longer guarantees security: even lengthy passwords can be compromised if they follow predictable patterns.
The research shows that short passwords of up to eight characters that appeared in the leak are typically cracked by brute force attacks in under a day. However, thanks to AI-powered smart algorithms, more than 20% of 15-character passwords can be broken in less than a minute.
What’s more 60.2% of all analysed passwords – regardless of length – can be cracked in about an hour; 68.2% – in a day.
In the examples provided, the calculations assume a single RTX 5090 GPU and the MD5 algorithm. In real‑world scenarios, attackers can rent multiple GPUs – ten, a hundred, or even more. Under such conditions, the cracking rate would increase potentially by several orders of magnitude.
In modern terms, truly secure passwords not only meet the gold standard of 16+ characters, but also consist of random, non-repeating letters, numbers, and symbols, and are unique for each account. To help users create such passwords, Kaspersky has added a password generation feature to the Kaspersky Password Generator website. Now users can not only check their passwords for leaks, but also generate secure passwords for free.
For easy and secure password management, auto-fill, and cross-device synchronisation consider using a password manager in which all credentials are stored in a secure vault and protected by a single master password. This eliminates the need to remember hundreds of passwords while keeping them safe from breaches.
What’s more, not only passwords, but also passkeys can be created and stored directly in Kaspersky Password Manager, which allows not only to sign in to supported services with a single tap, but also to access passkeys on all devices owing to secure synchronisation.
News
Cybervergent Expands to Three New Markets

Cybervergent has launched version 3.0 of its artificial intelligence (AI)-native posture management platform and expanded operations into Kenya, Ghana, and SA.

The move, according to the company, introduces automated risk verification for enterprises and aims to position Africa as a force in digital governance technology.
It goes on to say the latest platform upgrade introduces continuous posture management, replacing traditional point-in-time governance, risk, and compliance reporting with real-time verification systems.
An AI engine independently verifies 99.9% of audit and monitoring findings before they appear on enterprise dashboards, according to Cybervergent.
It says risk management, compliance, audit, and data security operations are integrated into a unified system built for cloud and on-premise environments.
According to Cybervergent, the platform maps more than 4 500 controls across frameworks, including the Nigeria Data Protection Act (NDPA), International Organisation for Standardisation (ISO) 27001, and System and Organisation Controls (SOC) 2.
Cybervergent says the rollout of its first South African customer validates the platform’s readiness for highly regulated enterprise markets and strengthens its expansion strategy across Africa’s leading technology and financial hubs.
The company is also adopting a channel-first deployment model, working with local partners and system integrators in Lagos, Accra and Johannesburg to scale verified security infrastructure for enterprises navigating increasingly complex regulatory demands.
“We built verification into the architecture,” said Ayomide Daniels, co-founder and chief scientist at Cybervergent. “If a finding is not traceable back to source documentation, it does not reach the dashboard.”
Cybervergent rebranded from Infoprivacy in late 2023 to reflect its shift towards AI-automated cybersecurity.
The start-up previously focused on data privacy compliance in the West African market before pivoting to its current integrated posture management model.
E-Financial2 days agoFCMB Opens Applications for Zero-Interest Loans of Up to ₦10m for Women Entrepreneurs
E-Business2 days agoKaspersky Identifies Ongoing Supply Chain Attack on Official Daemon Tools Website Distributing Backdoor Malware
Telecom2 days agoReps Claim NCC’s Weak Regulatory Oversight Responsible for Poor Telecom Services
Telecom2 days agoVitel Wireless Partners Fintechs to Expand Access to Services
Telecom2 days agoGSMA Africa Policy Group Chair Calls for Urgent Tax Reforms to Accelerate Digital Inclusion
E-Financial2 days agoPolice Arrest Members of N713m Bank Fraud Syndicate, Chinese Suspect at Large
News2 days agoFG Bans Honorary Degree Holders from Using ‘Dr’ Title, Warns of Academic Fraud
E-Financial2 days agoFirm Unveils Pan-African Financial Operating System to Improve Interoperability



















