Connect with us

Telecom

Fraudsters Target Phone OTA in New Trick

Published

on

Kindly share this post

A security expert has warned of possible attacks targeted at mobile phone users via the telecommunication operators Over-The-Air (OTA) settings, so called various methods of distributing new software updates, configuration settings, and even updating encryption keys to devices like cellphones.

Mr. Rock Adoke, head of IT (security & Research), International Electronics Services Limited, told Nigeria CommunicationsWeek that with the growing trend in e-commerce cumulated in e-payment, e-banking, internet banking, fraudsters are throwing spanners on the OTAs of notable telecommunication companies in Nigeria targeting passwords and other credentials of phone users. 

In the context of the mobile content world the programming involves over-the-air service provisioning (OTASP), over-the-air provisioning (OTAP) or over-the-air parameter administration (OTAPA), or provisioning handsets with the necessary settings with which to access services such as WAP or MMS or other internet configurations.

Thus, some phones with this capability are labeled as being “OTA capable.”

“Now, the challenge, let us look at the scenario where you remove the SIM card from your phone and insert it in a new phone, the network operator sends internet settings to you. We are looking at the financial institution (FI) level; when that setting is going on it can be compromised, just like the bulk SMS. There are securities issues with these platforms. Fraudsters can impersonate anybody and send messages using bulk SMS platform. There is why unsolicited messages are rising by the day. When they send it to over a million people, hundred or thereabout respond, they have captured over N100,00 million.

 “Back to the settings, there are only four vendors we subscribe to when we want to conduct vulnerability assessment on information systems. SMS gives you the ability for Over-The-Air (OTA) settings; that is what telecom operators send to the subscribers. It is a system that companies use to safeguard against staff using social media while incorporating Bring Your Own Device (BOYD) platform.

The setting allows you have access to the internet at a point in time. What the fraudsters do is to OTA settings which is not more than N300, send out messages to people and they respond in droves. The idea has been that once you see that setting it is from a valid telecom operator, because we use it to browse”.

 He said that cyber criminals are cashing on telecom operators over the air positioning space.

 “When they have succeeded in setting the proxy account whatever the target is doing will be passing through their channels. That is what they call “over the air positioning exploits”. Let the target use it for any bank transaction, they will see the user name and password through “factor authentication”. These things are real.

He warned about unguided and unsecured channels been deployed for e-commerce related transaction in the country adding when, “You are now encouraging people to use mobile commerce, by the time this goes into full-blown maturity, criminals start conducting sophisticated attacks (because things happen without user interaction), the target does not even know he is compromised. It takes a smart criminal to remove just N1 per day. When your account has been compromised they go to the modification channel and modify the password and your numbers. These are the trends in cyber attacks”.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

Telecom

Terra Moves to Expand in African Drone Sector, Secures $22m Funding

Published

on

Kindly share this post

Olugbenga Agboola, Flutterwave CEO has joined a $22 million funding extension for Nigerian defensetech start-up Terra Industries as Africa’s fast-growing drone and security technology sector begins to attract capital far beyond traditional venture circles.

The round was led by Lux Capital, with participation from Agboola through Resilience17 Capital and returning investors including 8VC and Nova Global.

It follows an $11.75 million raise just weeks earlier, bringing Terra’s total funding to $34 million as the company accelerates expansion into high-risk security markets.

Terra, founded in 2024 by 24-year-old chief engineer Maxwell Maduka and CEO Nathan Nwachuku, builds autonomous drones and surveillance systems designed to protect critical infrastructure such as energy facilities, logistics corridors and industrial sites. The startup says it is already safeguarding assets worth billions of dollars while securing early federal and commercial contracts.

Agboola’s involvement highlights a broader shift in African tech investment patterns. While fintech has long dominated venture flows, escalating infrastructure sabotage and terrorism threats have elevated demand for locally developed security hardware.

“Nigeria’s drone ecosystem is rapidly evolving from hobbyist and mapping use cases toward industrial monitoring, border surveillance and energy protection, areas increasingly seen as foundational to economic stability.

“This is about backing infrastructure security at scale. Africa’s growth depends on resilient systems that protect critical assets,” said Agboola.

Terra CEO Nwachuku is adamant that locally engineered systems are better suited to African operating conditions. “We are building tools designed for the realities on the ground. Security technology should not always be imported when local innovation can respond faster and more effectively,” he stated.

Lux Capital partner Brandon Reeves underlined that the investor appetite, which has drawn fintech heavyweight interest such as Agboola, reflects rising cross-sector confidence in African defense technology as a commercial category. “Security is a prerequisite for economic growth,” he said.

“As Terra ramps production and expands regionally, its funding milestone illustrates a wider transformation. Drone and autonomous security platforms are no longer peripheral experiments but emerging pillars in Africa’s technology landscape, where fintech leaders and venture capital converge around safeguarding the infrastructure powering the continent’s next growth phase,” said Reeves

 


Kindly share this post
Continue Reading

Telecom

Temu Assures Compliance Amid Nigeria Data Privacy Probe

Published

on

Kindly share this post

Temu, the global e-commerce platform expanding in Nigeria, has officially addressed an inquiry from the Nigeria Data Protection Commission (NDPC) over alleged data privacy violations, confirming its commitment to compliance with the Nigeria Data Protection Act (NDPA) 2023.

Temu Assures Compliance Amid Nigeria Data Privacy Probe

Temu

The company’s response follows NDPC’s investigation into Temu’s data processing practices.

In a statement to Nigeria CommunicationsWeek, Temu stressed its dedication to local and international data protection standards, noting ongoing communication with the regulator. “At Temu, protecting user privacy and data security is a top priority. We are committed to complying with applicable laws and regulations in our data practices,” the statement read.

Temu further affirmed: “We can confirm that Temu has received the inquiry and is engaging with the Commission. We will continue to engage in open and constructive dialogue with the NDPC to address any questions or concerns.”

Under Dr. Vincent Olatunji’s leadership, NDPC has ramped up scrutiny of foreign digital platforms to safeguard Nigerian citizens’ personal data—from contact details to financial information—ensuring transparent and secure handling. For e-commerce giants like Temu, managing vast consumer data volumes demands strict regulatory alignment to sustain operations and trust in Africa’s biggest economy.

Industry observers view Temu’s proactive stance as a savvy bid to ease tensions, mirroring Nigeria’s firm handling of platforms like X (formerly Twitter) and fintechs. This engagement underscores NDPC’s rising clout, compelling investors and foreign entrants to prioritise data compliance costs.

Nigeria CommunicationsWeek sees Temu’s approach as a model for global retailers eyeing Nigeria’s booming digital retail sector through 2026.


Kindly share this post
Continue Reading

Telecom

NIMC Rolls Out WorkflowPro for Paperless Correspondence

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has deployed WorkflowPro as its official platform for the digital submission and management of correspondence.

NIMC Rolls Out WorkflowPro for Paperless Correspondence

NIMC

Kayode Adegoke Phd, Head, Cooperate Communications of NIMC said this in a press statement on Tuesday, 17th February, 2026, pointing out that this was “In furtherance of President Bola Ahmed Tinubu’s Renewed Hope Agenda and the Federal Government’s commitment to institutionalizing a paperless public service.”

According to the statement, “The   adoption   of   WorkflowPro   marks   NIMC’s   formal   transition   to   a   paperless operating   environment   and   reflects   the   Commission’s   resolve   to   strengthen governance,    improve    administrative    efficiency,    and    standardize     records management in line with approved public sector reforms. The platform  provides a  secure,  structured,  and   traceable  system   for  managing   both  internal   and external  communications,  thereby  enhancing  accountability  and  operational transparency.

“Under the new framework, all external correspondence to NIMC will be processed electronically  through  WorkflowPro.  The  system  enables  end-to-end  tracking  of submissions,  accelerates  internal   routing   and  response  timelines,  and   ensures secure  electronic  archiving of  official  records. This  approach  eliminates  the risks associated  with  manual  handling  of  documents  while  reinforcing  compliance with established information management standards.”

Adegoke added that “The implementation of  WorkflowPro is  consistent with  the  Federal  Government’s Enterprise Content Management  (ECM)  policy, which mandates the digitization of   official   records   and   the   elimination   of   physical   file   movements   across   all Ministries, Departments, and Agencies  (MDAs) .

“Accordingly,  all  external   correspondence  addressed  to  the   National   Identity Management Commission must be submitted via the NIMC WorkflowPro platform, accessible through the official portal link or by scanning the designated QR code:
Portal Link:https://workflowpro-nimc.com/Submit . Correspondence

To  support  effective  implementation,  NIMC  has  approved  a  30-day  transition period   from   the   date   of   this   announcement,   during  which  stakeholders   are expected  to acquaint themselves with  the  new  process.  Upon  the expiration of this   period,   the   Commission   will   discontinue   the   acceptance   of    manually submitted letters and paper-based correspondence.

“WorkflowPro  was   developed   by   NIMC’s   in-house   technical   team   under   the directive   of   the   Director-General/Chief   Executive   Officer,   Engr.   (Dr.)  Abisoye Coker-Odusote. The platform forms part of a broader institutional reform agenda aimed   at   strengthening    the   security   of    official   communications,    reducing administrative   delays,   and   entrenching   digital   governance  within   the   public service.

“The  National  Identity  Management  Commission  enjoins  all  stakeholders  to  take note of this policy directive and ensure full compliance.”


Kindly share this post
Continue Reading

Trending