News

NCC-CSIRT Identifies Two Cyber Vulnerabilities

The Nigerian Communications Commission’s Cyber Security Incident Response Team (NCC-CSIRT) has independently identified two cyber vulnerabilities and advised Nigerian telecom consumers on the measures to be taken to get protected from the cyber-attacks.

The CSIRT, in its first-ever security advisories less than three months after its creation, has solely identified the two cyber-attacks targeting the consumers and proffer solutions that can help telecom consumers from falling victims to the two cyber vulnerabilities.

The first is described as Juice Jacking, which can gain access into consumers’ devices when charging mobile phones at public charging stations and it applies to all mobile phones. The other is a Facebook for Android Friend Acceptance Vulnerability, which targets only Android Operating System.

According to CSIRT security Advisory 0001 released on January 26, 2022, with Juice Jacking, attackers have found a new way to gain unauthorized entry into unsuspecting mobile phone users devices when they charge their mobile phones at public charging stations.

Many public spaces, restaurants, malls and even in the public trains do offer complementary services to their customers in a bid to enhance customer services, one of which is providing charging ports or sockets.  

However, an attacker can leverage this courtesy to load a payload in the charging station or on the cables they would leave plugged in at the stations.

Once unsuspecting persons plug their phones at the charging station or the cable left by the attacker, the payload is automatically downloaded on the victims’ phone. This payload then gives the attacker remote access to the mobile phone, allowing them to monitor data transmitted as text, or audio using the microphone. The attacker can even watch the victim in real time if the victims’ camera is not covered. The attacker is also given full access to the gallery and also to the phone’s Global Positioning System (GPS) location.

When an attacker gains access to a user’s Mobile phone, he gets remote access to the User’s phone which leads to breach in Confidentiality, Violation of Data Integrity and bypass of Authentication Mechanisms. Symptoms of attack may include sudden spike in battery consumption, device operating slower than usual, apps taking a long time to load, and when they load they crash frequently and cause abnormal data usage.

The NCC-CSIRT, however, proffered solutions to this attack to include using ‘charging only USB cable’, to avoid Universal Serial Bus (USB) data connection; using one’s AC charging adaptor in public space; and not granting trust to portable devices prompt for USB data connection.

Other preventive measures against Juice Jacking include installing Antivirus and updating them to the latest definitions always; keeping mobile devices up to date with the latest patches; using one’s own power bank; keeping mobile phone off when charging in public places; as well as ensuring use of one’s own charger, if one must charge in public.

On the other hand, the NCC-CSIRT Advisory 0001 of January 27, 2022, warns that Facebook for Android is vulnerable to a permission issue which gives privilege to anyone with physical access to the android device to accept friend requests without unlocking the phone. The products affected include Versions 329.0.0.29.120 of Android OS.

With this, the attacker will be able to add the victim as a friend and collect personal information of the victim, such as Email, Date of Birth, Check-ins, Mobile phone number, Address, Pictures and other information that the victim may have shared, which would only be visible to his/her friends.

However, to be protected from the Facebook-associated vulnerability, NCC-CSIRT in the security advisory recommends to users to disable the feature from their device’s lock screen notification settings.

The NCC-CSIRT was inaugurated in October, 2021 to provide guidance and direction for the constituents in dealing with issues relating to the security of critical infrastructure in their possession, and periodically assess, review and collate the threat landscape, risks, and opportunities affecting the communications sector, in order to provide advice to relevant stakeholders in those regards.

As the telecoms-industry specific intervention, the objective of which aligns with the objective of the National Cybersecurity Policy and Strategy (NCPS) document published by the Office of the National Security Adviser (ONSA), the NCC-CSIRT ensures continuous improvement of processes and communication frameworks to guarantee secure and collaborative exchange of timely information while responding to cyber threats within the sector.

In recent times, NCC-CSIRT has raised series of cyber-vulnerability awareness based on security advisories it receives from the Nigerian Cybersecurity Emergency Response Team (ngCERT), which is the national body for the implementation of the NCPS objective. However, Juice Jacking and Facebook for Android Friend Acceptance Vulnerabilities are the two first-ever cyber vulnerabilities published by the NCC-CSIRT.

Leave a Comment

Your email address will not be published.

You may also like

Business Economy Society Software Technology

The critical role of data in debt recovery amid surge in consumer debt

post-image

 

 

As South Africans and their pockets are impacted by rising inflation, cost-of-living increases, and a spate of interest rate hikes over the past two years, consumer debt has surged at an alarming rate. More people are turning to credit facilities to keep up with daily expenses, with worrying knock-on effects for businesses and the entire South African economy.

 

With a renewed focus on debt recovery processes and procedures, businesses need to ensure they have the most reliable, up-to-date information available to assist with recovering outstanding monies. “As the cost of borrowing escalates, and the average South African consumer finds themselves allocating approximately 62% of their take-home pay towards servicing debt, the need for efficient, effective debt recovery strategies is a crucial consideration for any business extending credit,” explains Chantelle Frier, National Sales Manager of SearchWorks, South Africa’s largest and most innovative data aggregation platform that allows users to conduct…

Read More
Announcements Business Culture Events

NITDA Celebrates Exceptional Women Staff Members in Commemoration of International Women’s Day 2024

post-image

In honor of International Women’s Day 2024, the National Information Technology Development Agency (NITDA) proudly recognized the invaluable contributions of its female staff members during the Quarterly Staff General Meeting.

Led by the esteemed Director-General of NITDA, Kashifu Inuwa CCIE, the event served as a platform to commend and honor female staff members whose remarkable efforts have significantly contributed to the agency’s accomplishments. In a gesture of appreciation and acknowledgment, Director-General Kashifu Inuwa CCIE presented letters of commendation to these outstanding women, underscoring NITDA’s unwavering commitment to fostering inclusivity and empowering women within the agency.

The Quarterly Staff General Meeting not only celebrated the achievements of these exceptional women but also reaffirmed NITDA’s dedication to recognizing and nurturing talent across all gender identities. As an agency at the forefront of technological innovation, NITDA remains steadfast in its mission to create an inclusive and equitable workplace where every…

Read More
Business Events Fintech

PAFON 1.0: Experts Harp on Stricter Data Privacy Measures in Payments Ecosystem in AI Era

post-image

·      Tasks Payments System Operators on the Need for Consumer Education

 

The Chairman of the Committee of Chief Information Security Officers of Nigerian Financial Institutions (CCISONFI), Mr. Festus Amede, has identified Data Minimization Principles, User Consent and Control, as well as Compliance with Privacy Regulations as important elements in protecting privacy in payments.

 

Amede who was represented by an executive member of CCISONFI, Mr. Olusola Odediran (also, the Chief Information Security Officer) Nigeria Inter-Bank Settlement System (NIBSS), spoke during his keynote presentation at the maiden edition of Payments Forum Nigeria (PAFON 1.0) held at Oriental Hotel, Lagos on Thursday.

 

His presentation themed, ‘Payments: Trust, Security and Privacy in the AI Era,’ explored the critical…

Read More
Business Economy

Nigeria Seeks Joint West Africa Regional Protection of Undersea Cables

post-image

 

 

Following recent undersea cable cuts that challenged connectivities in many countries in the West African region, Nigeria has called for a coordinated and multilateral approach by the region to protect shared telecommunications infrastructure, and diversify connectivity to ensure uninterruptible connections.

 

Executive Vice Chairman of the  Nigerian Communications Commission (NCC), Dr. Aminu Maida, made the submission in a statement delivered at the 21st West Africa Telecommunications Regulatory Assembly (WATRA) Annual General Meeting (AGM) which held in Freetown, Sierra Leone, from the 19th to 22nd March 2024.

 

Dr. Maida, whose message was delivered at the WATRA AGM by the Deputy Director, Public Affairs of the Commission, Nnenna Ukoha, stated that the recent submarine cable cuts that resulted in nationwide outages on multiple networks in 12 African countries has raised the urgent need for the subregion to establish a mechanism to protect itself from damage to submarine infrastructure and its attendant impact on the…

Read More
Business Opinion Technology Technology Trends

WHY HYUNDAI AND KIA HAVE ONE OF THE BEST FUEL ECONOMY

post-image

 

 

I watched one video yesterday when one of my brother Uncle IB did some review on Hyundai Sonata so i decided to throw more light on it.

Hyundai and Kia are so much underated in Nigeria and the reason is lack of information. Hyundai and Kia are the most fuel efficient vehicles but most people are not aware.
They use more advanced engine technology on and that’s why they use smaller engines to push out much power with less fuel.

They make use of technology like:
▪︎CVVT (Continously variable valve timing)
▪︎DPFI (Dual port fuel injection)
▪︎ITMS (Integrated Thermal Management System)
▪︎HTCS (High Thermal Conversion system)
▪︎FOMS (Friction optimized moving system)
▪︎ High Ignition Energy EGR
▪︎Smartstream Transmission.
▪︎Wet 8 – Speed DCT.

Hyundai and Kia make use of smartstream engines. Engines like GDi produce high power and good for high driving speed conditions while engines like MPi are smoother with less power…

Read More
Business

NDPC to Partner Ondo to Upskill Youths, Create Jobs in Data Protection

post-image

The Nigeria Data Protection Commission (NDPC) has expressed its readiness to work with the Ondo state government to promote a culture of Data Protection that would also help create employment opportunities for young people in the state.

The National Commissioner/CEO of NDPC, Dr Vincent Olatunji, revealed this when he received his excellency, the Ondo state Deputy Governor, Olayide Adelami, at the commission’s headquarters in Abuja on Friday.

Dr Olayide said the purpose of his visit was to explore possible areas of collaboration between NDPC and the state in a way that fosters development for the people of the State.

According to him, “our government is passionate about youth development and one of the ways to ensure our youths are gainfully employed is to equip them with the right skills, needed for 21st century workplace. In view of this, we have identified ICT as one key area to upskill our youths…

Read More
Business Economy Technology Technology Trends

8 Reasons MacBooks Are Better Than Other Laptops

post-image

MacBooks have been around for a while now, and in that time, they’ve cemented themselves as some of the most popular laptops available. They’re well-designed, easy to use, and come with some great features. But why are they so popular? And more importantly, why are they better than Windows-based laptops?

Here, we’ll explore several reasons why we think Apple laptops are better than the competition, touching on everything from durability to ease of purchase and more.

8. The Apple Ecosystem

The Apple ecosystem is made up of all the hardware and software that Apple designs and puts out. Almost all Apple devices, apps, and operating systems are a part of the ecosystem: iPhone, iPad, Apple TV, Apple Watch, Mac, iCloud, Apple Music, and so on.

So, when people talk about the Apple ecosystem, they’re actually referring to how well all these products work together. It’s the ecosystem that makes it possible…

Read More
Announcements Business

Bimbo Abioye, Fintrak Software’s Group Managing Director, Recognized Among “Top 50 Most Valuable Personalities in Nigeria’s Digital Economy”

post-image

 

 

Fintrak Software, Nigeria’s leading indigenous software development firm specializing in financial software, proudly announces the recognition of its Group Managing Director, Bimbo Abioye, at the prestigious “Top 50 Most Valuable Personalities in Nigeria’s Digital Economy” event. The ceremony, held at Providence Hotel in Ikeja GRA, Lagos State, celebrates Abioye’s outstanding contributions to the nation’s digital landscape.

Bimbo Abioye FCA,MBA,ACTI,CISA,CISM,CISSP,FICA,MNCS,AFCPN,SRMA - FinTrak Software Company LLC | LinkedIn
Bimbo Abioye , GMD Fintrak Software

Despite his absence due to commitments in an Eastern African country, Mr. Bimbo Abioye was represented by Ladi Ipaye, who graciously accepted the award on his behalf. The accolade underscores Abioye’s remarkable achievements and relentless dedication to advancing Nigeria’s digital economy.

Reflecting on Abioye’s impact, Ladi Ipaye remarked, “Bimbo Abioye has spearheaded Fintrak’s transformation into a powerhouse within the fintech ecosystem, elevating the firm from a modest consultancy…

Read More