Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

Telecom

Beware! Hackers Can Unlock, Steal Your Vehicles – NCC Warns Nigerians

Published

on

Kindly share this post

The Nigerian Communications Commission (NCC) wishes to alert telecom consumers and members of the public on an ongoing cyber-vulnerability that allows a nearby hacker to unlock vehicles, start their engines wirelessly and make away with the cars.

The fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this emergent danger, where hackers take advantage to unlock and start a compromised car.

According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.

With this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether. “Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly. The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.

However, the NCC-CSIRT, in the advisory, has offer some precautionary measures or solutions that can be adopted by car owners to prevent falling victim to the attack.

According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter. Additionally, vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.”
Importantly, car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.

The PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit. The RKE system, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.

Additionally, in a related advisory, the NCC, based on another detection by CSIRT, wishes to inform the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store. This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.

The malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process. Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.

As a consequence, a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.

It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible.

To avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users have been advised to avoid downloading unnecessary apps or installing apps from unofficial sources. The NCC also wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.

Conclusively, the NCC recommends that unauthorised transactions be checked against any installed app. Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

PAT Taps Osi as CEO

Published

on

Kindly share this post

Pan African Towers (PAT), a Nigerian infrastructure provider serving 9mobile and Spectranet, has appointed Echezona Osi as chief executive officer.

PAT Taps Osi as CEO

Echezona Osi

Adefolarin Ogunsanya, company’s, board chairman,  explained in a statement that Osi would succeed Oladipo Badru, whose tenure lasted nine months in acting CEO position. Osi has more than 28 years of experience in the telecommunications sector across various regions of Africa.

Prior to his appointment as CEO, he had served as the head of network deployment at Airtel Nigeria, operations director and chief technical information officer at MIC Tanzania, chief technology officer roles at IPT PowerTech Nigeria, Rhino Niger Networks and Biswal Nigeria.

He obtained a degree in electrical/ electronic engineering from the University of Benin and a postgraduate diploma in data science and business analytics from the University of Texas.


Kindly share this post
Continue Reading

Telecom

NCC Introduces N10m Licence Fee for Bulk SMS Service

Published

on

Kindly share this post

Companies sending bulk international text messages, also known as Application-to-Person (A2P) messages, will now have apply for a licence that costs N10 million.

NCC Introduces N10m Licence Fee for Bulk SMS Service

This is part of new rules introduced by the Nigerian Communications Commission (NCC) aimed at cleaning up the system, fighting fraud, blocking spam messages and stopping money from leaving the country unchecked.

These A2P messages are the kind customers get from banks, online stores, hospitals and political campaigns, automated texts sent from apps to their phones.

According to the commission, the bulk international text message system has been poorly regulated, allowing misuse and invasion of privacy.

“The International SMS Service Ecosystem in Nigeria has not been fully brought under regulatory control. It has been observed that the excessive use of the Short Message Service has led to fraud, spam and illegal activities,” the NCC said.

The regulator warned that without action, the problem would worsen as more people use mobile phones and digital services.

To solve this, the NCC is creating a central platform, or gateway, through which all international bulk text messages must pass through.

The agency said this would help to monitor messages in real time, ensure proper fees are paid, and make sure the money stays in Nigeria where it can contribute to the economy.

As part of the incoming change, service providers must follow strict rules, including strong data protection, spam filters, and message encryption.

Also, they must also work with local mobile networks and make sure all messages come from a verified sender

The NCC warned that any message without a proper sender ID will be blocked and not delivered to users.

To protect users from unwanted texts, the new rules say companies must get clear permission before sending any promotional content.

The rule also says people must also be able to choose whether they want to receive such messages or not.

Companies are now required to keep records of all messages for at least six months and must clearly state all charges involved.

The NCC said fees for help requests, cancellations, or service info must be transparent and not include hidden charges.

The commission will issue licences to several providers to encourage healthy competition but may limit new licences if needed.

Only companies that show they can stop fraud and safely deliver messages will be allowed to operate. They must also regularly report their message traffic and finances to the NCC.

It warned that any company that breaks the rules risks getting fined, suspended, or having its licence revoked.

Offences like charging illegal tariffs, ignoring security rules, or avoiding taxes will be punished, the NCC said.

The commission added that the new rules follow the Nigerian Data Protection Act 2023 and support the federal government’s goal of strengthening cybersecurity and controlling Nigeria’s digital space.

The framework will also be reviewed from time to time to keep up with new technology and market trends.


Kindly share this post
Continue Reading

Telecom

MTN Nigeria Targets $1Bn Cloud Market with Largest Modular Data Centre

Published

on

Kindly share this post

MTN Nigeria has launched what it claims is the country’s largest prefabricated modular data centre, marking a bold push into the country’s fast-growing cloud market and taking aim at global giants such as Amazon Web Services, Microsoft Azure and Google Cloud.

MTN Nigeria Targets $1Bn Cloud Market with Largest Modular Data Centre

Karl Toriola, CEO, MTN Nigeria.

The shift comes as demand for cloud services in Nigeria soars — driven by the uptake of mobile apps, fintech tools and e-learning platforms — while foreign providers have become costlier in the wake of the naira’s sharp devaluation.

“This is one of the biggest data centres in West Africa and probably one of the biggest in Africa,” said Karl Toriola, CEO, MTN Nigeria.

He described the new Tier III-certified facility, with locally hosted cloud services, as “transformative for the technology ecosystem in Nigeria and very supportive of the federal government’s agenda”.

MTN Nigeria, the country’s largest telecoms provider, has so far invested $120m in the first phase, delivering an IT load of 4.5MW. A second phase, set to double capacity to 9MW, is budgeted at $135m.

“We already have data centres that are running our existing capacities,” Toriola said.

“We will go to 9MW in short order, possibly 14MW, and we can expand even further.”

He said the facility would allow local hosting for tech developers, large enterprises including banks and oil companies, and government agencies — markets long dominated by foreign cloud providers.

“Multinational companies such as Netflix, Facebook and Instagram can also host a lot of their data here. That improves the quality of service and reduces the cost of storage,” he added.

 


Kindly share this post
Continue Reading

Trending