Telecom
Fraudsters Target Phone OTA in New Trick
A security expert has warned of possible attacks targeted at mobile phone users via the telecommunication operators Over-The-Air (OTA) settings, so called various methods of distributing new software updates, configuration settings, and even updating encryption keys to devices like cellphones.
Mr. Rock Adoke, head of IT (security & Research), International Electronics Services Limited, told Nigeria CommunicationsWeek that with the growing trend in e-commerce cumulated in e-payment, e-banking, internet banking, fraudsters are throwing spanners on the OTAs of notable telecommunication companies in Nigeria targeting passwords and other credentials of phone users.
In the context of the mobile content world the programming involves over-the-air service provisioning (OTASP), over-the-air provisioning (OTAP) or over-the-air parameter administration (OTAPA), or provisioning handsets with the necessary settings with which to access services such as WAP or MMS or other internet configurations.
Thus, some phones with this capability are labeled as being “OTA capable.”
“Now, the challenge, let us look at the scenario where you remove the SIM card from your phone and insert it in a new phone, the network operator sends internet settings to you. We are looking at the financial institution (FI) level; when that setting is going on it can be compromised, just like the bulk SMS. There are securities issues with these platforms. Fraudsters can impersonate anybody and send messages using bulk SMS platform. There is why unsolicited messages are rising by the day. When they send it to over a million people, hundred or thereabout respond, they have captured over N100,00 million.
“Back to the settings, there are only four vendors we subscribe to when we want to conduct vulnerability assessment on information systems. SMS gives you the ability for Over-The-Air (OTA) settings; that is what telecom operators send to the subscribers. It is a system that companies use to safeguard against staff using social media while incorporating Bring Your Own Device (BOYD) platform.
The setting allows you have access to the internet at a point in time. What the fraudsters do is to OTA settings which is not more than N300, send out messages to people and they respond in droves. The idea has been that once you see that setting it is from a valid telecom operator, because we use it to browse”.
He said that cyber criminals are cashing on telecom operators over the air positioning space.
“When they have succeeded in setting the proxy account whatever the target is doing will be passing through their channels. That is what they call “over the air positioning exploits”. Let the target use it for any bank transaction, they will see the user name and password through “factor authentication”. These things are real.
He warned about unguided and unsecured channels been deployed for e-commerce related transaction in the country adding when, “You are now encouraging people to use mobile commerce, by the time this goes into full-blown maturity, criminals start conducting sophisticated attacks (because things happen without user interaction), the target does not even know he is compromised. It takes a smart criminal to remove just N1 per day. When your account has been compromised they go to the modification channel and modify the password and your numbers. These are the trends in cyber attacks”.
With the introduction of Travel Saga, a premium, fast-paced gaming experience that is currently live and accessible to customers on its network, Globacom has lifted the bar for mobile entertainment in the country.
Travel Saga is a story-driven, intricately connected role-playing game designed to provide the thrill, complexity, and competitive intensity of some of the most well-known action games in the world.
The game, which has been painstakingly optimized for mobile devices, redefines mobile gaming as a full-fledged digital battlefield by translating a console-grade experience onto data-enabled handsets.
Fundamentally, Travel Saga takes users on quick virtual journeys against recognizable international landscapes. In a dynamic, ever-evolving gaming environment, players are thrown into furious missions, fierce fights, and ever-expanding tales where talent, strategy, and endurance determine who rises through the ranks to become a true war hero.
In addition to the excitement of fighting, users are encouraged to go to various locations, take part in thrilling challenges, and participate in intense competition for in-app rewards like points and victory badges. With each encounter and accomplishment, the immersion increases with each level, maintaining momentum and excitement.
Flexible subscription plans with one-time or auto-renewal choices are available to subscribers for the service, which costs ₦100 per day and ₦250 per week. By dialing *70021#, customers can quickly subscribe and gain instant access to the action.
With Travel Saga, Glo reaffirms its dedication to innovation and high-end digital experiences, making top-notch gaming easily accessible to its customers. The game offers uninterrupted action, adventure, and competition, all smoothly supported by the Glo network.
SHELT, a leading cybersecurity-as-a-service provider, has earned inclusion in the 2025 MSSP 250, the annual ranking of the world’s top 250 Managed Security Service Providers (MSSPs) by MSSP Alert, a CyberRisk Alliance publication.
SHELT
The list evaluates firms on business performance, service breadth, and industry impact, spotlighting those excelling in growth, operational excellence, and advanced managed security amid rising cyber threats. Selection criteria include annual recurring revenue, profitability, workforce expansion, business growth, and the depth of managed security offerings.
SHELT’s recognition underscores its investments in scalable security operations, threat intelligence, and tailored managed services across multiple regions, enabling clients to navigate complex risk landscapes effectively.
“Being recognised in the MSSP 250 is a meaningful milestone for our team,” stated Youssef Abillama, CEO of SHELT. “It validates our focus on building practical, resilient security services that help organisations manage risk and respond effectively to today’s evolving cyber threats.”
The company hailed the honour as testament to its teams’ dedication and expertise worldwide, reaffirming commitment to enhancing capabilities and delivering trusted cybersecurity solutions.
Meta Platforms, owner of Facebook, has appointed Dina Powell McCormick, a former adviser to President Donald Trump, as its new president and vice chairman, bolstering its leadership amid aggressive AI and infrastructure expansion.
Dina Powell McCormick
The announcement, made on Monday, positions Powell McCormick – who recently stepped down from Meta’s board after eight months – to guide overall strategy, including multi-billion-dollar investments in data centres and global partnerships.
A Goldman Sachs veteran with 16 years in senior roles and prior stints as deputy national security adviser under Trump and in the Bush administration, she brings deep finance and international ties to the role.
Meta CEO Mark Zuckerberg hailed her as “uniquely qualified” for the company’s next growth phase, while President Trump praised the move on Truth Social as a “fantastic choice”.
The hire signals Meta’s efforts to strengthen White House relations, following recent dinners with Trump and U.S. investment pledges worth hundreds of billions
EFCC to Use Space Technology to Boost Asset Tracking, Investigations
SEC Partners Police in Nationwide Crackdown on Ponzi Schemes, Crypto Frauds
Paystack Expands Beyond Payments into Banking
DalaHill, BoA Partner on $100,000 ACF Climate Finance Initiative
How to Stay Safe Online During Sales Periods
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
FIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda
Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack
PalmPay Launches N400 Million World Travel Carnival, Rewarding Users with Free Global Trips
General News3 days agoPalmPay, Premier Cool to Reward 10,000 Nigerians with ₦100m in “10k for 10k Campaign”
E-Financial3 days agoEcobank Joins Trillion-naira Club for the First Time in 20 Years
E-Business3 days agoKaspersky Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk
E-Financial2 days agoAngst as FG Demands 7.5 Percent VAT on Mobile Bank Transfers, USSD
E-Business3 days agoNigerian Terra Industries Secures $11.8m for Expansion
Telecom3 days agoSHELT Named in Prestigious 2025 MSSP 250 List for Cybersecurity Excellence
News2 days agoMoniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline
E-Financial2 days agoNGX lists 3.156bn UBA shares, boosting capital to N513Bn