Technology

NCC alerts of hacking group targeting Telcos, ISPs

In keeping with its commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected, the Nigerian Communications Commission (NCC) wishes to, once again, notify the public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.

An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage.

Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.

According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.

The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.

By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.

Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s backdoors, consisting of over 20 domains, including six that were previously not associated with the threat actors.

According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization. The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.

However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.

Specifically, telecom consumers and the general public are advised to:

  1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
  2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
  3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
  4. Implement the use of Intrusion Prevention Systems that monitors your network.
  5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
  6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
  7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.

For further technical assistance, contact ngCERT on incident@cert.gov.ng.

The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space. This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.

Signed:
Dr. Ikechukwu Adinde
Director, Public Affairs

November 15, 2021Press Statement

Again, NCC alerts of hacking group targeting Telcos, ISPs

In keeping with its commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected, the Nigerian Communications Commission (NCC) wishes to, once again, notify the public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.

An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage.

Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.

According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.

The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.

By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.

Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s backdoors, consisting of over 20 domains, including six that were previously not associated with the threat actors.

According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization. The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.

However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.

Specifically, telecom consumers and the general public are advised to:

  1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
  2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
  3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
  4. Implement the use of Intrusion Prevention Systems that monitors your network.
  5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
  6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
  7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.

For further technical assistance, contact ngCERT on incident@cert.gov.ng.

The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space. This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.

Leave a Comment

Your email address will not be published.

You may also like

Announcements Business Education Government News Society Technology Technology Trends Telecoms Tourism Trends

NCC commits to bridging digital gender divide

post-image

 

…As Danbatta Bags ‘Icon of Digital Revolution Award’

The Nigerian Communications Commission (NCC) has reiterated its unwavering commitment to bridging growing gender-oriented digital divide to accelerate inclusive economic prosperity for all Nigerian citizens.

Executive Vice Chairman of the Commission, Prof. Umar Garba Danbatta who restated this commitment in Lagos at the 2022 Nigerian Women Entrepreneurs and Executives in Tech Summit (WEETS), Thursday, September 15, 2022, where he was conferred with the ‘Icon of Digital Revolution Award’ for his role in stimulating digital connectivity in Nigeria, said promotion of gender equality is a major component of ICT development.

He noted that the gender dimensions of ICT, manifests in access and use; capacity-building opportunities; employment and potential for empowerment, and that all these dimensions need to be explicitly identified and addressed, to leverage on technology and communication as powerful catalysts for political, economic, and social empowerment of women, and the promotion of gender equality.

Speaking…

Read More
Announcements Business Events Government Society Technology Technology Trends Telecoms

NCC Deploys 84 IT Projects to Support Persons with Disabilities

post-image

 

The Nigerian Communications Commission (NCC) has deployed 84 assistive Information Technology projects at different locations in Nigeria to support people with special needs while supporting policies that enable disadvantaged members of the society to live a more qualitative life.

“The E-Accessibility project seeks to meet the ICT needs of persons living with disabilities in Nigeria by providing ICT tools, assistive technologies, training, and Internet provision in the identified locations. Between 2012 to 2020, the NCC has deployed the E-Accessibility Projects in, at least, 84 locations nationwide.”

The Executive Vice Chairman (EVC) of the Commission, Prof. Umar Danbatta, disclosed this during a courtesy visit by a delegation from National Commission for Persons with Disabilities (NCPWD) to the NCC over the weekend in Abuja, where the EVC also restated NCC’s commitment to continually support people with special needs across the country.

Danbatta, while receiving the NCPWD team led by its Executive Secretary, James Lalu,…

Read More
Business Society Technology Technology Trends Telecoms

CX is just the tip of the competitive spear

post-image

Following the successful introduction of a reinvigorated brand at the recent CEM Africa Summit in Cape Town, Immersion Group’s bold new vision of creating a new industry standard where all experience disciplines work together to fully maximise profitability and growth is best articulated by the Group’s newly appointed Head of Experience Design, Ismail Dawjee. He believes experience design should be viewed as a strategic lever in gaining a competitive advantage and that multi-disciplinary skills integration in end-to-end experience design will have an unprecedented impact on the industry and organisations that adopt this fresh approach.

 

Forward-thinking organisations are beginning to see that experience design isn’t just another business capability, but rather a fundamental ingredient to commercial success. Conversations are rightly shifting from how many UX (user experience) professionals a business might need or what an ideal journey map looks like to how organisations can plan…

Read More
Business Government Investments Society Tourism

NIGERIA HOSTS GLOBAL INVESTMENT FORUM IN NEW YORK

post-image

 

In its continued bid to further open up the country’s economy to international capital and attract foreign investment, the Nigerian government, in collaboration with the Africa Business Roundtable, is organizing the second edition of the Nigeria International Economic Partnership Forum (NIEPF), a global economic investment platform, this time in New York, United States.

This high-level event is scheduled for Thursday, September 22, 2022, on the sidelines of the 77th United Nations General Assembly taking place in the American city.
Holding alongside the annual global gathering, the NIEPF is expected to draw the presence of world leaders in politics, economy, media as well as Civil Society Oganisations and international media to focus on the vast economic potentials of Nigeria and Africa’s leading economy.

Most significantly, President Muhammadu Buhari will deliver the keynote address at the event and will also host a High-Level Presidential Session with fellow Presidents and Heads of delegations on Issues…

Read More
Business Featured Finance Investments Technology Technology Trends

Sidestepping complex payments through the power of one platform

post-image

 

 

The fast pace of digital transformation for financial services is vital for the empowerment of small businesses and their customers. However, in this transformation process, traditional payment methodologies are being bypassed by new technology and products.

 

Understandably, merchants are finding it increasingly difficult to keep abreast of all the latest payment products and solutions that are available. “It is complex and costly for merchants to manage their own integrations into multiple solution providers. Merchants should be focusing on their core businesses and leave payment complexities to specialist companies,” says Andrew Springate, CEO of tech and financial gateway service provider PAYM8.

 

Founded in 2001, PAYM8 quickly expanded its footprint across the African continent and now processes over R3 billion in annual transaction value for its clients, and is one of the few payment solution providers in Africa capable of providing a single offering to merchants spanning both payer and payee-initiated…

Read More
Business Technology Technology Trends Telecoms Trends

NCC Deploys 84 IT Projects to Support Persons with Disabilities

post-image

 

The Nigerian Communications Commission (NCC) has deployed 84 assistive Information Technology projects at different locations in Nigeria to support people with special needs while supporting policies that enable disadvantaged members of the society to live a more qualitative life.

“The E-Accessibility project seeks to meet the ICT needs of persons living with disabilities in Nigeria by providing ICT tools, assistive technologies, training, and Internet provision in the identified locations. Between 2012 to 2020, the NCC has deployed the E-Accessibility Projects in, at least, 84 locations nationwide.”

The Executive Vice Chairman (EVC) of the Commission, Prof. Umar Danbatta, disclosed this during a courtesy visit by a delegation from National Commission for Persons with Disabilities (NCPWD) to the NCC over the weekend in Abuja, where the EVC also restated NCC’s commitment to continually support people with special needs across the country.

Danbatta, while receiving the NCPWD team led by its Executive Secretary, James Lalu, said…

Read More
Business Finance Gadgets Investments News Technology Technology Trends Telecoms

The most common Facebook Marketplace scams and how to avoid them

post-image

 

 

Carey van Vlaanderen, CEO of ESET South Africa shares critical safety tips when buying or selling on Facebook Marketplace and how to tell if you’re being scammed.

 

Last year, Facebook Marketplace passed one billion global users. With this, it has become a giant in the consumer-to-consumer commerce space, allowing individual Facebook users to buy and sell seamlessly. Online retail in South Africa has more than doubled in just two years and with 29.5 million-strong Facebook users, more than half of the country’s population has a Facebook account.

 

Dominating the online classifieds

Marketplace has become so popular in South Africa that similar platforms are struggling to compete. Previously-popular OLX has closed its doors, while Gumtree still hangs on by a thread. Facebook Marketplace has outstripped the popularity of these online classifieds portals for several reasons. It is free and simple to use, as most people already have a Facebook account….

Read More
Business Investments Technology Technology Trends Telecoms

Clickatell Helps Nigerians Access eNaira Services, Boosting Financial Inclusion

post-image

Clickatell (https://www.Clickatell.com), a CPaaS innovator and Chat Commerce leader, has partnered with the Central Bank of Nigeria (CBN) (https://www.CBN.gov.ng) to deliver fast, simple, and cost effective eNaira banking services to all Nigerians using the USSD channel, eliminating the need for data and available on all handsets.

 

Clickatell has collaborated with the CBN to launch a USSD channel for its eNaira Central Bank Digital Currency (CBDC) (www.eNaira.gov.ng) as part of the country’s drive to make basic banking accessible to all Nigerians, ultimately driving financial inclusion.

The eNaira was launched in October 2021 when the Nigerian President, Muhammadu Buhari, said Africa’s first central bank-backed digital currency would help boost remittances, foster cross-border trade, and help his government make welfare payments more easily. With financial inclusion at the heart of the eNaira goals, President Buhari also said that he believed the CBDC…

Read More