Connect with us

Telecom

What You Need to Know About Multifactor Authentication Fatigue Attacks and How they can be Prevented

Published

on

Kindly share this post

Multifactor authentication is a security measure that requires users to provide a second form of verification before they can log into a corporate network. It has long been considered essential for keeping fraudsters out. However, cybercriminals have been discovering increasingly clever ways to bypass it.

During an attack on Uber’s IT systems in 2022, the hackers did not use any sophisticated tactics to gain access. Instead, they bombarded an employee with repeated login requests until, out of sheer frustration, the employee approved one.

This type of cyberattack is known as an “MFA fatigue attack” and poses a real risk to organisations, says Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 AFRICA, a cybersecurity training designer.

“MFA fatigue attacks, also known as prompt spamming or authentication bombing, exploit human vulnerability, rather than relying on high-tech hacking methods,” she explains. “These attacks involve sending continuous push notifications to a target who has already provided their username and password, aiming to irritate or confuse them into unwittingly granting the attacker access to their account or system.”

With Uber, the attacker likely bought the contractor’s Uber corporate username and password on the dark web. The attacker then made repeated attempts to log into the victim’s Uber account. Each time, the victim received a request to approve a two-factor login, which blocked access at first. However, eventually, and after the attacker contacted the contractor on WhatsApp claiming they were from Uber IT and that the only way to get rid of the never ending notifications was to accept one, the contractor accepted one request, allowing the attacker to successfully log in.

Previously, cybersecurity experts believed that Multifactor Authentication (MFA) was a foolproof method to protect corporate IT systems from hackers. “Now we’re seeing attackers finding ways around it by bombarding the victim with scores of MFA requests or by tricking them over the phone,” says Collard. This tactic, similar to a swarm of bees overwhelming someone, is a simple yet effective social engineering technique used by hackers. “By bugging you repeatedly until you give in, malicious actors can manipulate users into approving fraudulent access attempts,” says Collard.

How can you prevent it?

The best way to prevent MFA fatigue attacks in organisations is not to use push notifications. “While MFA provides an extra layer of security, it’s not foolproof,” she asserts. “From a cybersecurity perspective, I would recommend that organisations disable push notifications altogether and rather use alternative verification methods.”

An example of a better verification method is number matching. “This involves matching a unique code provided by the authentication app with the code displayed on the screen during the login process,” explains Collard.

A challenge-response method is another effective way of providing additional security. This method asks a user a specific question to verify their identity or to perform a task in response to a challenge. “A challenge-response method is more difficult for hackers to bypass. It can involve mechanisms like biometric authentication, in which users must scan their fingerprints or irises or use facial recognition to gain access to a network.” However, both of the above are not immune against so-called man in the middle or social engineering attacks tricking the users to hand over their OTP or response to the fraudster.

Another effective verification method is FIDO2, an open authentication standard that allows users to log in without using passwords. “You can implement FIDO2 using hardware security keys,” she explains. Typically, USB sticks store the user’s private key, while the public key is stored on the authentication server. As soon as the user enters their username and password, the system requests them to use the hardware key. “It is more resistant to phishing as it works on a challenge-response protocol and doesn’t rely on a one-time PIN that can be intercepted,” she adds.

Mindfulness is key

As with all hacking attempts, it’s crucial that users remain calm and mindful, rather than reacting emotionally. “Stay tuned into your body’s responses when dealing with potential cybersecurity threats, whether they are phishing emails or MFA fatigue attacks,” says Collard. “If something feels strange, like if the situation is putting you under undue pressure, listen to that cue and don’t respond in a knee-jerk fashion. In this way, you’ll keep a straight head and thwart potential data breaches.”


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

FCCPC Denies Banning Airtime Borrowing, Blames Cartel for Misinformation

Published

on

Kindly share this post

Federal Competition and Consumer Protection Commission (FCCPC) has dismissed widespread claims that it banned airtime borrowing and data advance services in Nigeria, describing the reports as false and driven by vested interests seeking to mislead the public.

FCCPC Denies Banning Airtime Borrowing, Blames Cartel for Misinformation

In a statement issued on Friday, the commission said it neither cancelled nor prohibited such services, contrary to viral social media posts and some media reports suggesting otherwise.

The clarification follows a wave of public concern triggered by viral social media posts and some media reports suggesting that the Commission had shut down telecom-based credit services widely used by millions of Nigerians.

Recall that in separate notices, Airtel and MTN Nigeria announced the temporary suspension of their airtime and data credit services, which previously allowed eligible prepaid customers to borrow airtime or data and repay on their next recharge.

But FCCPC, said no such directive was issued, stressing that consumers remain free to access lawful telecom value-added services.

Ondaje Ijagwu, director of Corporate Affairs, FCCPC, said that “The attention of the Federal Competition and Consumer Protection Commission has been drawn to a series of newspaper publications and a viral anonymous post on social media seeking to create the impression that the Commission cancelled, shut down, or banned airtime borrowing and data advance services in Nigeria. Those claims are incorrect.

“The Commission has not prohibited airtime borrowing or data advance services, and no directive was issued preventing consumers from accessing lawful telecom value-added services,” the statement partly read.

Rather than a regulatory ban, the FCCPC attributed recent disruptions in some of these services to the failure of certain operators to comply with its Consumer Lending Regulations introduced in July 2025.

According to the Commission, the regulations were developed following a surge in consumer complaints over exploitative practices in the digital lending and advance-services space.

“Following a deluge of consumer complaints bordering on opaque charges, unexplained deductions, aggressive recovery practices, poor disclosure standards, and inadequate accountability in segments of the digital lending and advance-services market, the Federal Competition and Consumer Protection Commission issued the DEON Consumer Lending Regulations in July 2025.

“The Regulations were introduced, among other reasons, to curb the excesses of abusive service providers whose practices had generated persistent consumer harm and undermined confidence in the market,” it stated.

The agency said the framework was designed to sanitise the market and protect consumers by enforcing transparency, accountability, and fair competition.

“The primary aim is to promote a fairer and more transparent system by mandating proper registration, responsible lending conduct, clear disclosure of fees and terms, accessible consumer complaint channels, data protection safeguards, stronger accountability for third-party partners, and effective regulatory oversight,” the FCCPC explained.

Providing a deeper insight into the telecom sector, the Commission revealed that some operators had been engaged in anti-competitive practices, including exclusionary arrangements with third-party service providers.

“In the telecom sector, our findings indicated that some operators engaged in exclusionary third-party technical arrangements in clear disobedience to the provisions of the Federal Competition and Consumer Protection Act, 2018. The Regulations sought to unlock the market to allow local participants alongside foreign partners, in line with free market principles,” it said.

It added that the new regulations were also intended to open up the market to more participants, including local players, in line with free market principles.

Despite giving operators ample time to comply, the FCCPC said several companies failed to align with the new regulatory framework.

Related News

“These measures benefit Nigerians by reducing abusive practices, improving transparency, strengthening consumer choice, and encouraging responsible innovation by legitimate operators. At the commencement of the framework in July 2025, affected operators were granted an initial 90-day compliance period to regularise their products, structures, and operations. That opportunity was not utilised within the prescribed timeframe,” the statement noted.

The Commission said it extended the deadline to January 5, 2026, but compliance remained unsatisfactory.

“Despite that further extension, the necessary compliance steps were still not completed by the relevant operators,” it added.

The regulator stressed that any temporary suspension or restriction of services should be seen as a business decision by non-compliant operators rather than a government-imposed ban.

“Any temporary suspension, restriction, or operational change introduced by service providers should therefore be understood as a business or compliance decision by those operators, not a ban imposed by the FCCPC,” it said.

The Commission also accused certain interest groups of deliberately spreading false information to undermine reforms.

“We are aware that some vested interests and their foreign collaborators are opposed to the creation of safe markets and fair competition, therefore resorting to a campaign of disinformation,” it stated.

Describing such narratives as “mischievous,” the FCCPC urged Nigerians to disregard sensational claims and rely on verified information.

“It is inaccurate to attribute avoidable disruption to regulation where regulated entities had adequate notice and sufficient opportunity to comply. Nigerians deserve accurate information, not sensational claims.

“The FCCPC is fully committed to protecting consumers, promoting fair competition, encouraging responsible innovation, ensuring transparent digital financial practices, and working constructively with sector regulators and service providers in the public interest,” the statement added.

Airtime borrowing and data advance services have become critical tools for millions of telecom subscribers in Nigeria, allowing users to access credit for calls and internet services with repayment deducted upon recharge.

However, the segment has long been plagued by complaints over hidden charges, automatic deductions, unclear repayment terms, and aggressive recovery mechanisms.

The FCCPC’s intervention through the Consumer Lending Regulations marked one of the most significant attempts to regulate digital micro-lending and telecom-based credit services in the country.

The rules align with broader efforts by the Federal Government to strengthen consumer protection, enhance transparency in digital financial services, and curb exploitative practices in Nigeria’s rapidly expanding fintech and telecom ecosystem.

Friday’s clarification signals a push by the regulator to reclaim the narrative, reassure consumers, and shift responsibility to operators who have yet to fully comply with the law.

The Commission reaffirmed its commitment to protecting consumers while fostering innovation and fair competition in the sector, noting that regulatory compliance remains non-negotiable for all service providers operating in the Nigerian market.


Kindly share this post
Continue Reading

Telecom

Airtel Nigeria Suspends Airtime and Data Credit Services

Published

on

Kindly share this post

Airtel Nigeria has announced the temporary suspension of its airtime and data credit services. The affected services allowed eligible prepaid customers to borrow airtime or data and repay on their next recharge.

However, the company noted that customers will continue to enjoy uninterrupted access to airtime and data purchases through its existing channels.

Airtel Nigeria also indicated that the temporary suspension is not expected to have a material impact on its service standards across the country.

Commenting on the development, Airtel Nigeria Director of Marketing Ismail Adeshina, said:

“This is a necessary and responsible step as we align our operations with evolving requirements. Airtel Nigeria remains committed to the highest standards of compliance, transparency, and consumer protection, while continuing to innovate responsibly within Nigeria’s digital ecosystem.”

The company added that it will provide updates on the status of the service in due course.


Kindly share this post
Continue Reading

Telecom

NITDA Urges Youths to Build Nigeria’s AI Future Now

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has urged young Nigerians to take the lead in developing home-grown artificial intelligence (AI) solutions to address the country’s socio-economic challenges.

NITDA Urges Youths to Build Nigeria’s AI Future Now

The Director General of National Information Technology Development Agency, Kashifu Inuwa, represented by Mrs. Udoka Mannie of the Digital Literacy and Capacity Building Department, delivered the keynote address at the Artificial Intelligence Hackathon organised by the Agency in partnership with VibeCode Africa in Abuja.

Kashifu Inuwa, director-general of NITDA, made the call at an Artificial Intelligence Hackathon organised by the agency in partnership with VibeCode Africa in Abuja.

Inuwa, who was represented by the Acting Director of Digital Literacy and Capacity Building, Dr Ahmed Tambuwal, and delivered through Mrs Udoka Mannie, said Nigeria’s youthful population presents a significant opportunity for innovation and digital transformation.

He noted that with over 60 per cent of Nigerians under the age of 25, the country is well positioned to benefit from emerging technologies such as AI.

“As you can see, this room is filled with young people. This represents a powerful opportunity for innovation and digital skills development,” he said.

Inuwa stated that the hackathon provided a strategic platform for participants from diverse backgrounds to collaborate and develop practical AI-driven solutions tailored to Nigeria’s realities.

He observed that artificial intelligence is already transforming economies, governance systems and societies globally, stressing that Nigeria must decide whether to shape the technology for national development or remain a passive consumer.

According to him, NITDA’s mandate is to regulate and develop information technology in Nigeria while ensuring it serves as a driver of economic growth.

He explained that the agency’s Digital Literacy and Capacity Building Department is focused on building a digitally skilled population capable of competing in the global digital economy.

The Director-General highlighted the Digital Literacy for All initiative (DL4ALL) as a flagship programme aimed at equipping millions of Nigerians with essential digital skills, in line with the Federal Government’s target of achieving 95 per cent digital literacy by 2030.

“Beyond literacy, we are now moving into capability. It is one thing to use technology, but another thing entirely to build with it. Today, we are challenging you to build,” he said.

Inuwa urged participants to prioritise impact-driven innovation, identifying sectors such as healthcare, agriculture, education, financial inclusion, public service delivery and misinformation as areas where AI can drive meaningful change.

He also stressed the importance of ethics, inclusion and data protection in the development of AI solutions.

“As we explore AI, we must be mindful of ethics, data protection and inclusion. Building responsibly is just as important as building brilliantly,” he said.

Inuwa commended VibeCode Africa for partnering with NITDA, describing such collaborations as vital for scaling innovation across the country.

He encouraged participants to collaborate, experiment and innovate, adding that Nigeria’s AI future would be driven by local talent.

“The future of AI in Nigeria will not be imported. It will be built by people like you in rooms like this,” he said.

In her remarks, the founder of VibeCode Africa, Lola Adey, urged participants to harness AI to solve real-life challenges within their communities.

Adey said the hackathon was designed to move beyond theory by encouraging participants to identify problems they personally experience and develop practical solutions.

“We want you to dig deep into yourselves. What are the problems you are facing? What are the issues you notice when you walk around?” she said.

She cited challenges such as electricity shortages, insecurity and gaps in social services as areas where innovation could make a difference.

Adey added that the initiative aims to create opportunities for entrepreneurship, employment and global exposure for young Nigerians.

“With artificial intelligence, you now have something in your hand that you can use to actually solve problems. You don’t have to wait for anybody anymore,” she said.

She urged participants to remain focused, collaborative and open to learning, noting that the platform could connect them to future partners, investors and employers.


Kindly share this post
Continue Reading

Trending