Telecom
Xenomorph Malware: NCC-CSIRT Advises Nigerians To Factory-Reset Infected Devices

A malware, Xenomorph, that installs Trojan in banking apps on the Android platform to steal login details, raid bank accounts, and read the users SMS, has been flagged by the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT). The Team suggests that owners of compromised devices take the extreme measure of doing factory resetting of infected devices.

NCC-CSIRT, citing Zscaler ThreatLabz, said, “The Todo: Day Manager hijacks your login info from banking apps, and can even read your SMS messages.
“It installs a banking trojan malware called Xenomorph that allows the app to intercept your two-factor verification codes (typically delivered over text) to raid your logins – and bank account.
“Xenomorph performs overlay attacks by exploiting accessibility permissions in Android, resulting in the overlaying of fraudulent login screens on banking apps aimed at exfiltrating credentials. The Android app makes itself intentionally difficult to delete. You need to search your phone for it immediately and uninstall it.”
“It starts with asking users to enable access permission. Once provided, it adds itself as a device admin and prevents users from disabling Device Admin, making it un-installable from the phone. If you haven’t given permission to the app, then you should be able to uninstall it safely. Otherwise, you may have to back up your files and then factory-reset your phone to clear the app completely,” it advised.
In terms of potential solutions to the malware, NCC-CSIRT advised that “Search your phone for the app and uninstall immediately or backup your files and factory reset your phone.
“Only search for an app in the Google Play Store, pay close attention to the search results, look at the apps icons, note that fake apps almost always use the icon from the app they’re faking, then look at the developer’s name and make sure it’s from the right developer.
Also, look at the app’s download count. If the app has a lot of downloads going into millions to hundreds of thousand that’s a clue that it’s the right app.
Then, finally, look at the app’s description and screenshots to ensure that it doesn’t contain multiple spelling or grammar mistakes or otherwise broken English.
“Make use of Google Play Protect, which regularly scans your apps for malware and will alert you to uninstall rogue apps.”
The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.
The CSIRT also works collaboratively with Nigeria Cybersecurity Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.
Telecom
Terra Moves to Expand in African Drone Sector, Secures $22m Funding

Olugbenga Agboola, Flutterwave CEO has joined a $22 million funding extension for Nigerian defensetech start-up Terra Industries as Africa’s fast-growing drone and security technology sector begins to attract capital far beyond traditional venture circles.

The round was led by Lux Capital, with participation from Agboola through Resilience17 Capital and returning investors including 8VC and Nova Global.
It follows an $11.75 million raise just weeks earlier, bringing Terra’s total funding to $34 million as the company accelerates expansion into high-risk security markets.
Terra, founded in 2024 by 24-year-old chief engineer Maxwell Maduka and CEO Nathan Nwachuku, builds autonomous drones and surveillance systems designed to protect critical infrastructure such as energy facilities, logistics corridors and industrial sites. The startup says it is already safeguarding assets worth billions of dollars while securing early federal and commercial contracts.
Agboola’s involvement highlights a broader shift in African tech investment patterns. While fintech has long dominated venture flows, escalating infrastructure sabotage and terrorism threats have elevated demand for locally developed security hardware.
“Nigeria’s drone ecosystem is rapidly evolving from hobbyist and mapping use cases toward industrial monitoring, border surveillance and energy protection, areas increasingly seen as foundational to economic stability.
“This is about backing infrastructure security at scale. Africa’s growth depends on resilient systems that protect critical assets,” said Agboola.
Terra CEO Nwachuku is adamant that locally engineered systems are better suited to African operating conditions. “We are building tools designed for the realities on the ground. Security technology should not always be imported when local innovation can respond faster and more effectively,” he stated.
Lux Capital partner Brandon Reeves underlined that the investor appetite, which has drawn fintech heavyweight interest such as Agboola, reflects rising cross-sector confidence in African defense technology as a commercial category. “Security is a prerequisite for economic growth,” he said.
“As Terra ramps production and expands regionally, its funding milestone illustrates a wider transformation. Drone and autonomous security platforms are no longer peripheral experiments but emerging pillars in Africa’s technology landscape, where fintech leaders and venture capital converge around safeguarding the infrastructure powering the continent’s next growth phase,” said Reeves
Telecom
Temu Assures Compliance Amid Nigeria Data Privacy Probe

Temu, the global e-commerce platform expanding in Nigeria, has officially addressed an inquiry from the Nigeria Data Protection Commission (NDPC) over alleged data privacy violations, confirming its commitment to compliance with the Nigeria Data Protection Act (NDPA) 2023.

Temu
The company’s response follows NDPC’s investigation into Temu’s data processing practices.
In a statement to Nigeria CommunicationsWeek, Temu stressed its dedication to local and international data protection standards, noting ongoing communication with the regulator. “At Temu, protecting user privacy and data security is a top priority. We are committed to complying with applicable laws and regulations in our data practices,” the statement read.
Temu further affirmed: “We can confirm that Temu has received the inquiry and is engaging with the Commission. We will continue to engage in open and constructive dialogue with the NDPC to address any questions or concerns.”
Under Dr. Vincent Olatunji’s leadership, NDPC has ramped up scrutiny of foreign digital platforms to safeguard Nigerian citizens’ personal data—from contact details to financial information—ensuring transparent and secure handling. For e-commerce giants like Temu, managing vast consumer data volumes demands strict regulatory alignment to sustain operations and trust in Africa’s biggest economy.
Industry observers view Temu’s proactive stance as a savvy bid to ease tensions, mirroring Nigeria’s firm handling of platforms like X (formerly Twitter) and fintechs. This engagement underscores NDPC’s rising clout, compelling investors and foreign entrants to prioritise data compliance costs.
Nigeria CommunicationsWeek sees Temu’s approach as a model for global retailers eyeing Nigeria’s booming digital retail sector through 2026.
Telecom
NIMC Rolls Out WorkflowPro for Paperless Correspondence

National Identity Management Commission (NIMC) has deployed WorkflowPro as its official platform for the digital submission and management of correspondence.

NIMC
Kayode Adegoke Phd, Head, Cooperate Communications of NIMC said this in a press statement on Tuesday, 17th February, 2026, pointing out that this was “In furtherance of President Bola Ahmed Tinubu’s Renewed Hope Agenda and the Federal Government’s commitment to institutionalizing a paperless public service.”
According to the statement, “The adoption of WorkflowPro marks NIMC’s formal transition to a paperless operating environment and reflects the Commission’s resolve to strengthen governance, improve administrative efficiency, and standardize records management in line with approved public sector reforms. The platform provides a secure, structured, and traceable system for managing both internal and external communications, thereby enhancing accountability and operational transparency.
“Under the new framework, all external correspondence to NIMC will be processed electronically through WorkflowPro. The system enables end-to-end tracking of submissions, accelerates internal routing and response timelines, and ensures secure electronic archiving of official records. This approach eliminates the risks associated with manual handling of documents while reinforcing compliance with established information management standards.”
Adegoke added that “The implementation of WorkflowPro is consistent with the Federal Government’s Enterprise Content Management (ECM) policy, which mandates the digitization of official records and the elimination of physical file movements across all Ministries, Departments, and Agencies (MDAs) .
“Accordingly, all external correspondence addressed to the National Identity Management Commission must be submitted via the NIMC WorkflowPro platform, accessible through the official portal link or by scanning the designated QR code:
Portal Link:https://workflowpro-nimc.com/Submit . Correspondence
To support effective implementation, NIMC has approved a 30-day transition period from the date of this announcement, during which stakeholders are expected to acquaint themselves with the new process. Upon the expiration of this period, the Commission will discontinue the acceptance of manually submitted letters and paper-based correspondence.
“WorkflowPro was developed by NIMC’s in-house technical team under the directive of the Director-General/Chief Executive Officer, Engr. (Dr.) Abisoye Coker-Odusote. The platform forms part of a broader institutional reform agenda aimed at strengthening the security of official communications, reducing administrative delays, and entrenching digital governance within the public service.
“The National Identity Management Commission enjoins all stakeholders to take note of this policy directive and ensure full compliance.”
General News2 days agoJumia Targets Break-even in 2026 After Strong Q4 Surge
General News2 days agoNigeria’s Banks Race to Meet CBN Recapitalisation Deadline Amid Verification Push
General News2 days agoBOI, MTN Foundation Unveil N1Bn Fund for Women Entrepreneurs
General News2 days agoUBA Unveils Diaspora Platform to Connect Global Africans with Investment, Wealth Opportunities
E-Financial2 days agoNo VAT on Land, Buildings and Rent Under New Tax Law — Oyedele
News1 day agoAfrican Leaders Highlight Africa’s AI Ambitions
E-Financial2 days agoCBN Slams Up to N10m Fine on Banks and Cheque Printers for Security Breaches
General News1 day agoNDPC Orders Probe into Temu over Alleged Data Privacy Breaches


















