Telecom
Cyberespionage: NCC Warns of Iranian Hacking Group Targeting Telcos, ISPs
The Nigerian Communications Commission (NCC) has again notified the general public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.
This is inline with the commission’s commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected.
The warning was contained in a statement released by Dr. Ikechukwu Adinde, Director, Public Affairs, NCC, on Monday in Abuja.
According to the statement, “An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage”.
Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.
According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.
The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.
By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).
Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.
Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s back doors, consisting of over 20 domains, including six that were previously not associated with the threat actors.
According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization.
The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.
However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.
Specifically, telecom consumers and the general public are advised to:
1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
4. Implement the use of Intrusion Prevention Systems that monitors your network.
5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.
For further technical assistance, contact ngCERT on [email protected].
The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space.
This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.
IHS Nigeria, part of the IHS Holding Limited (“IHS Towers”) group, one of the largest independent owners, operators, and developers of shared communications infrastructure in the world by tower count has announced a strategic partnership with the National Commission for Museums and Monuments (NCMM) and the Federal Ministry of Art, Culture, and the Creative Economy (FMACCE) to support the digitization of Nigeria’s cultural heritage.
This collaboration aims to make Nigeria’s historical artifacts, artworks, and cultural monuments more accessible to the public through a digital museum.
The partnership between IHS Nigeria, NCMM, and FMACCE will leverage technologies to digitalize and display artifacts online, helping to preserve and showcase Nigeria’s cultural heritage. It marks a significant step towards modernizing the preservation and dissemination of Nigeria’s cultural assets, making them more accessible to a broader audience.
The digital museum is the first significant project under the Honorable Minister’s Digital Culture Initiative and is designed to provide a platform for the exploration and appreciation of Nigeria’s diverse cultural heritage. This partnership underscores IHS Nigeria’s commitment to sustainability and its role in helping foster cultural preservation and digital education.
Mohamad Darwish, CEO, IHS Nigeria, commented, “We are excited to partner with the National Council for Museums and Monuments and the Federal Ministry of Art, Culture and the Creative Economy on this groundbreaking initiative. As a company deeply rooted in Nigeria, we recognize the importance of preserving, protecting, and promoting our cultural heritage.
“This partnership also aligns with our commitment to sustainability, education, economic growth, and community development. We look forward to contributing to the preservation of Nigeria’s cultural legacy”.
Hannatu Musawa, Nigeria’s Minister of Art, Culture and the Creative Economy, commented, “We are delighted to partner with IHS Nigeria on this initiative which aligns with His Excellency President Bola Ahmed Tinubu’s Renewed Hope Agenda, and our Ministry’s 8-point plan on fostering strategic partnerships.
“I am particularly pleased that this initiative, which is the first significant project under our Digital Culture Initiative, embodies our commitment to innovation, global partnerships, and the sustainable growth of our creative industries, positioning Nigeria as a leader on the global stage.”
Olugbile Holloway, Director General, National Commission for Museums and Monuments, commented, “We are grateful to IHS Nigeria for their support in this remarkable initiative.
“We believe that to keep ahead of current trends and appeal to a younger demographic, it is imperative that a digital experience of our rich cultural heritage is created and made available to the public.
“The digital museum will serve as an invaluable resource for researchers, students, and the general public, both in Nigeria and around the world, and will play a crucial role in the preservation of our national heritage.”
In a significant escalation of its antitrust battle against Google, the US Department of Justice (DOJ) on Wednesday, November 20, urged a federal judge to break up the tech giant by ordering the sale of its widely used Chrome browser.
The DOJ also called for an end to Google’s agreements to be the default search engine on smartphones and proposed measures to prevent it from leveraging its Android operating system to dominate the market.
The DOJ suggested that if these remedies fail, Google should be compelled to divest Android entirely. The proposals mark one of the most aggressive antitrust moves against a major tech company in decades, with regulators seeking to curtail Google’s alleged abuse of its market power.
Google’s president of global affairs, Kent Walker, criticized the filing, accusing the DOJ of pursuing a “radical interventionist agenda.” Walker warned that the proposed breakup would disrupt Google’s product ecosystem, harm innovation in artificial intelligence, and threaten America’s global technological leadership.
This case represents a historic shift in the US government’s approach to regulating tech companies, following decades of relative inaction since the failed attempt to break up Microsoft in the early 2000s.
Google is set to respond in a filing next month, with a hearing scheduled for April before Judge Amit Mehta. The judge’s August ruling declared Google a monopoly, setting the stage for this next phase of the legal battle. Any decision is likely to be appealed, potentially taking years to resolve and possibly reaching the US Supreme Court.
The case’s future could also hinge on political changes, as President-elect Donald Trump’s incoming administration may take a different approach to antitrust enforcement. Trump has previously criticized Google for alleged bias against conservatives but has also expressed skepticism about breaking up major tech companies.
The DOJ’s proposals come amid broader efforts to address the dominance of big tech, with five antitrust cases currently pending against Amazon, Meta, Apple, and Google. These cases, brought under the Biden administration, are expected to shape the regulatory landscape for years to come.
Dubai Racing Club (DRC) has named Zoho Corporation, a leading global technology company, as its exclusive technology partner for the next two years.
This partnership will focus on digitising DRC’s operations, with the aim of enhancing the club’s high-profile events and ensuring a seamless, world-class experience for visitors, participants, and staff.
The announcement was made during a signing ceremony at Meydan Racecourse, attended by His Excellency Ali Al Ali, CEO and Board Member of the Dubai Racing Club, and Prem Anand Velumani, Associate Director of Strategic Alliances, MEA at Zoho.
As the organiser of major events, including the prestigious Dubai World Cup, the DRC will leverage Zoho’s comprehensive suite of digital solutions through Zoho One, the operating system for businesses, to streamline key operations.
By implementing Zoho One, the club will enhance various aspects of its event management, from ticketing and sales to logistics and customer relationship management (CRM).
HE Al Ali commented on the partnership: “We are pleased to welcome Zoho as our official technology partner this season.
“Technology is a cornerstone of our long-term vision for the Dubai Racing Club and the continued development of the horse racing industry.
“Zoho brings a wealth of expertise, and we look forward to collaborating with their team to create tailored solutions for our clients. From sophisticated CRM systems and streamlined accreditation processes to innovative mobile applications designed to enhance the experience for horse owners and racegoers, we are focused on setting new benchmarks for excellence.
“This partnership brings us one step closer to establishing Meydan as one of the most technologically advanced racecourses globally.”
The DRC will leverage Zoho’s web and mobile applications to improve accessibility and communication across platforms.
Zoho CRM will play a pivotal role in managing ticketing and sales, offering a seamless and personalised experience for attendees.
Zoho’s apps will also support critical operational functions such as accreditation, simulcasting, parking and barricade management, and order management, all of which will be fully digitised to enhance accessibility and efficiency.
“We are thrilled to be the exclusive technology partner of the Dubai Racing Club, an iconic institution that plays a central role in global equestrian sports,” said Prem Anand Velumani, MEA at Zoho.
“This partnership presents an exciting opportunity to demonstrate how Zoho’s comprehensive suite of solutions can support DRC’s operations and its commitment to excellence.
“By utilising Zoho’s customisable tools, DRC will be able to digitise and optimise critical operations, driving greater collaboration, agility, and a seamless guest experience.
“We are proud to help position the DRC at the forefront of digital transformation in the regional and global equestrian sports industry.”
Zoho’s solutions will also streamline guest and VIP stand management, ensuring a smooth experience for high-profile visitors.
Zoho’s apps will assist with venue navigation, while an all-in-one analytics dashboard will provide the DRC’s internal team with real-time data to evaluate performance and track ROI across all operational areas.
This integrated approach will allow the DRC to optimise its event management processes and deliver an exceptional experience for participants, staff, and guests alike.
The two-year partnership will see the DRC fully harness Zoho’s suite of solutions to drive digital transformation across all aspects of its operations.
As the club continues to grow, Zoho’s innovative digital solutions will play a pivotal role in ensuring the optimisation and success of every operational facet—from event coordination to customer engagement.
Known for hosting some of the most prestigious equestrian events in the world, the DRC attracts audiences and participants from around the world.
The Dubai Racing Club’s next meeting at the Meydan Racecourse is scheduled for November 22, 2024.
NDPC to Begin Prosecution of Data Privacy Offenders from 2025
Nigeria, Others Confront Flood of Cyber-Attacks
NITDA Alerts Businesses to Rising Ymir Ransomware Threat
Africa Processed 49Bn Transactions in 2023 – SIIPS Report
Senate Approves New $2.2Bn External Borrowing for Nigeria
First Bank Proposes New Name after Upgrading Banking Platforms
Edo State Launches Data Centre in Benin
GSMA, Automotive Edge Computing Consortium Partner to Drive Forward Interoperable Connected Vehicle Services
Echefu Launches LUFT TV, another Pay TV after Failed TSTV Project
Nigeria Makes List of Top 10 Countries with Highest Cases of Internet Scams
News2 days agoALX Organises First-ever Business Showcase for its Community Entrepreneurs
Telecom3 days agoUNDP and Anambra State Foster Innovation with New Marketplace
E-Financial3 days agoCBN Issues Scam Alert, Warns of Fake SWIFT Messages Linked to Transfer Claim
Telecom3 days agoMTN Plans Satellite-Internet Rollout
E-Financial3 days agoMoniepoint Crowned Financial Inclusion Champion by CBN
Telecom2 days agoAirtel Africa-UNICEF Partnership Connects 1,200 Schools, 1M Africa Children to Digital Education
E-Business3 days agoKaspersky, AFRIPOL Strengthen Partnership in Combating Cybercrime
E-Financial3 days agoFG to Establish National Youth Development Bank to Support Young Nigerians