Telecom
Beware! Hackers Can Unlock, Steal Your Vehicles – NCC Warns Nigerians

The Nigerian Communications Commission (NCC) wishes to alert telecom consumers and members of the public on an ongoing cyber-vulnerability that allows a nearby hacker to unlock vehicles, start their engines wirelessly and make away with the cars.
The fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this emergent danger, where hackers take advantage to unlock and start a compromised car.
According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.
With this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether. “Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly. The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.
However, the NCC-CSIRT, in the advisory, has offer some precautionary measures or solutions that can be adopted by car owners to prevent falling victim to the attack.
According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter. Additionally, vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.”
Importantly, car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.
The PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit. The RKE system, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.
Additionally, in a related advisory, the NCC, based on another detection by CSIRT, wishes to inform the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store. This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.
The malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process. Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.
As a consequence, a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.
It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible.
To avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users have been advised to avoid downloading unnecessary apps or installing apps from unofficial sources. The NCC also wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.
Conclusively, the NCC recommends that unauthorised transactions be checked against any installed app. Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software.
Telecom
PAT Taps Osi as CEO

Pan African Towers (PAT), a Nigerian infrastructure provider serving 9mobile and Spectranet, has appointed Echezona Osi as chief executive officer.

Echezona Osi
Adefolarin Ogunsanya, company’s, board chairman, explained in a statement that Osi would succeed Oladipo Badru, whose tenure lasted nine months in acting CEO position. Osi has more than 28 years of experience in the telecommunications sector across various regions of Africa.
Prior to his appointment as CEO, he had served as the head of network deployment at Airtel Nigeria, operations director and chief technical information officer at MIC Tanzania, chief technology officer roles at IPT PowerTech Nigeria, Rhino Niger Networks and Biswal Nigeria.
He obtained a degree in electrical/ electronic engineering from the University of Benin and a postgraduate diploma in data science and business analytics from the University of Texas.
Telecom
NCC Introduces N10m Licence Fee for Bulk SMS Service

Companies sending bulk international text messages, also known as Application-to-Person (A2P) messages, will now have apply for a licence that costs N10 million.
This is part of new rules introduced by the Nigerian Communications Commission (NCC) aimed at cleaning up the system, fighting fraud, blocking spam messages and stopping money from leaving the country unchecked.
These A2P messages are the kind customers get from banks, online stores, hospitals and political campaigns, automated texts sent from apps to their phones.
According to the commission, the bulk international text message system has been poorly regulated, allowing misuse and invasion of privacy.
“The International SMS Service Ecosystem in Nigeria has not been fully brought under regulatory control. It has been observed that the excessive use of the Short Message Service has led to fraud, spam and illegal activities,” the NCC said.
The regulator warned that without action, the problem would worsen as more people use mobile phones and digital services.
To solve this, the NCC is creating a central platform, or gateway, through which all international bulk text messages must pass through.
The agency said this would help to monitor messages in real time, ensure proper fees are paid, and make sure the money stays in Nigeria where it can contribute to the economy.
As part of the incoming change, service providers must follow strict rules, including strong data protection, spam filters, and message encryption.
Also, they must also work with local mobile networks and make sure all messages come from a verified sender
The NCC warned that any message without a proper sender ID will be blocked and not delivered to users.
To protect users from unwanted texts, the new rules say companies must get clear permission before sending any promotional content.
The rule also says people must also be able to choose whether they want to receive such messages or not.
Companies are now required to keep records of all messages for at least six months and must clearly state all charges involved.
The NCC said fees for help requests, cancellations, or service info must be transparent and not include hidden charges.
The commission will issue licences to several providers to encourage healthy competition but may limit new licences if needed.
Only companies that show they can stop fraud and safely deliver messages will be allowed to operate. They must also regularly report their message traffic and finances to the NCC.
It warned that any company that breaks the rules risks getting fined, suspended, or having its licence revoked.
Offences like charging illegal tariffs, ignoring security rules, or avoiding taxes will be punished, the NCC said.
The commission added that the new rules follow the Nigerian Data Protection Act 2023 and support the federal government’s goal of strengthening cybersecurity and controlling Nigeria’s digital space.
The framework will also be reviewed from time to time to keep up with new technology and market trends.
Telecom
MTN Nigeria Targets $1Bn Cloud Market with Largest Modular Data Centre

MTN Nigeria has launched what it claims is the country’s largest prefabricated modular data centre, marking a bold push into the country’s fast-growing cloud market and taking aim at global giants such as Amazon Web Services, Microsoft Azure and Google Cloud.

Karl Toriola, CEO, MTN Nigeria.
The shift comes as demand for cloud services in Nigeria soars — driven by the uptake of mobile apps, fintech tools and e-learning platforms — while foreign providers have become costlier in the wake of the naira’s sharp devaluation.
“This is one of the biggest data centres in West Africa and probably one of the biggest in Africa,” said Karl Toriola, CEO, MTN Nigeria.
He described the new Tier III-certified facility, with locally hosted cloud services, as “transformative for the technology ecosystem in Nigeria and very supportive of the federal government’s agenda”.
MTN Nigeria, the country’s largest telecoms provider, has so far invested $120m in the first phase, delivering an IT load of 4.5MW. A second phase, set to double capacity to 9MW, is budgeted at $135m.
“We already have data centres that are running our existing capacities,” Toriola said.
“We will go to 9MW in short order, possibly 14MW, and we can expand even further.”
He said the facility would allow local hosting for tech developers, large enterprises including banks and oil companies, and government agencies — markets long dominated by foreign cloud providers.
“Multinational companies such as Netflix, Facebook and Instagram can also host a lot of their data here. That improves the quality of service and reduces the cost of storage,” he added.
- Broadcasting1 day ago
Nigeria Week Ahead: Inflation, Oil and Naira in focus
- News1 day ago
EFCC: Accusations Against Our Chairman Are Baseless and Misleading
- Broadcasting4 hours ago
A Billion-Dollar Obsession in 90-Second Bites
- General News1 hour ago
Woodhall Capital and Partners Launch ₦1.5Bn Fund
- General News1 hour ago
AM Best Reaffirms Stable Outlook for Cyber Insurance Market
- News1 hour ago
Experts Urge MSMEs to Build Strong Partnerships in Solving Problems,
- News1 hour ago
FirstBank, NLNG, Shell back QEDNG Creative Powerhouse Summit
- Telecom1 hour ago
MTN Nigeria Targets $1Bn Cloud Market with Largest Modular Data Centre