Telecom
NCC-CSIRT Issues Advisories to Protect Nigerians Against Threat Actors
Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT), in line with its mandate, has rolled out some advisories in the first few weeks of the year 2023 as cyber threat actors continue to devise means of compromising their targets.
The latest of such advisories urged users to be mindful after attackers use Microsoft OneNote attachments in phishing emails that infect victims with remote access malware, which may allow hackers to remotely access vital information on victims’ devices.
The Team advised users not open files from people they do not know, not to click ‘OK’ and immediately exit the application if they receive a warning that opening an attachment or link can damage their computer or files and to promptly share an unknown email they believe to be genuine with a security or Windows administrator to assist in determining whether the file is secure.
It had recently advised people not to open attachments in suspicious emails and to only purchase or download applications from official websites in response to the discovery of phishing malware that can gain unauthorized access to sensitive user data and download further malware.
The team reported that cybersecurity analysts at ASEC (South Korea’s cybersecurity emergency response centre), discovered a NetSupport RAT malware being distributed by threat actors from a phishing website disguised as a popular Pokemon card game.
The malware is a remote access tool that easily controls its victims’ Personal Computers and may allow the attackers to remotely control the compromised computer’s mouse and keyboard, access the system’s file management and history and even execute commands allowing them to install additional malware.
According to the researcher, the CRAFTED website that spread the malware is still online. It claims to be home to a new NFT card game built around the Pokemon franchise, offering users strategic fun together with NFT investment profits.
In a related advisory, following the discovery of several phishing apps on the Google Play Store, NCC-CSIRT had also advised users not to give out sensitive information through untrusted platforms.
NCC-CSIRT’s advisory on the discovery said the apps, which have been downloaded 450, 000 times in total, can be games or investment services, but that they are designed to steal sensitive user information.
While some of the malicious apps have been removed, others are still active on the store, with the affected apps listed as Golden Hunt, Reflector, Seven Golden Wolf Blackjack, Unlimited Score, Big Decisions, Jewel Sea, Lux Fruits Game, Lucky Clover, King Blitz, and Lucky Hammer.
According to the advisory, after installing and opening the app, it will contact a remote server which will reply with instructions on what to do. These instructions typically include phishing pages that will be displayed to unsuspecting users to collect their sensitive information.
Meanwhile, NCC-CSIRT also advised users to update their Galaxy App Store following the discovery of multiple vulnerabilities in the Samsung Galaxy App Store Application can lead to unwanted app installations and code execution. It disclosed that Ken Gannon, a cybersecurity researcher from NCC Group, discovered the vulnerabilities in the Galaxy App Store application on Samsung devices that are running Android 12 and older.
The CSIRT is the telecom sector’s cyber security incidence center set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.
The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.
Paradigm Initiative (PIN), a leading pan-African organisation dedicated to advancing digital rights and inclusion in the Global South, has made significant contributions to the just-concluded 2024 Internet Governance Forum (IGF) in Riyadh, Saudi Arabia.
PIN’s participation in the prestigious global event underscores the organisation’s commitment to fostering inclusive digital policies and ensuring that Africa’s voices are central in global discussions about the future of the internet.
During the week-long forum, PIN team members played key roles in numerous sessions, emphasising the importance of a digital rights perspective in the development of emerging technologies, advocating for a more inclusive digital future, and addressing the specific challenges the African continent faces in terms of digital access and inclusion.
PIN Executive Director, ‘Gbenga Sesan, spoke at high-profile sessions, including the Leadership Panel on ‘The Internet We Want’, which outlined the vision for a global internet that is accessible, secure, and inclusive.
At the Africa Youth IGF Parley, ‘Gbenga provided a platform for young Africans to address pressing issues such as internet restrictions, the digital divide, and digital rights violations.
Adeboye Adegoke, Senior Manager for Grants and Programmes Strategy at Paradigm Initiative, contributed to Open Forum #12, advocating for policies that ensure a rights-respecting and inclusive digital future. His discussions highlighted the importance of policies that place human rights at the core of technological advancements.
Ihueze Nwobilor, Senior Programmes Officer, spoke at the session, ‘A Rights-Respecting Approach to Emerging Tech Development,’ where he called for the prioritisation of human rights in the development and deployment of emerging technologies across Africa and beyond.
The organisation’s Senior Manager for Partnerships and Engagements, Thobekile Matimbe, shared valuable insights during the ‘Better Products and Policies Through Stakeholder Engagement’ session.
She emphasized the role of the private sector in engaging with local communities to ensure that digital products and policies are inclusive and meet the needs of vulnerable groups across Africa.
Bridgette Ndlovu, PIN Partnerships and Engagements Officer, moderated a session on ‘Implementation of the USF in 26 African Countries,’ where she and other speakers, including ‘Gbenga Sesan, discussed the crucial role of Universal Service Funds (USF) in advancing digital inclusion, particularly in underserved and rural areas.
PIN’s participation at IGF 2024 has been an important moment for advocating digital rights in Africa. “Paradigm Initiative’s participation was a powerful reminder that Africa’s digital future must be shaped by inclusive, rights-respecting policies.
“Our participation at the IGF is a continuous demonstration of the need for all stakeholders to collaborate in building a more inclusive and accessible internet for everyone, especially those in under-served communities,” PIN Executive Director, ‘Gbenga Sesan stated.
TikTok’s rise from a niche video-sharing app to a global social media giant has sparked controversies worldwide, with concerns over its links to China and its influence on users and politics.
In Albania, Prime Minister Edi Rama announced Saturday that TikTok would be banned for at least a year starting in 2025.
The decision follows a tragic incident in Tirana where a 14-year-old was killed and another injured in a fight stemming from an online confrontation. Rama described TikTok as the “thug of the neighborhood.”
In Romania, the European Union is investigating whether TikTok played a role in far-right candidate Calin Georgescu’s unexpected first-round presidential election victory.
The probe focuses on alleged Russian interference and claims of “preferential treatment” by TikTok. This marks the platform’s third EU investigation, potentially risking fines of up to six percent of its global revenue.
TikTok stated it has implemented “robust actions” to combat election misinformation, while Russia denies meddling.
In the United States, TikTok faces mounting pressure after the government passed a law in April requiring ByteDance, its Chinese parent company, to divest from the platform by January 2025.
The U.S. claims TikTok allows China access to American user data, a claim TikTok denies. ByteDance admitted its employees had accessed U.S. user data but insisted it does not share information with Chinese authorities.
TikTok could face a nationwide ban if ByteDance fails to comply, threatening its 170 million U.S. users.
Australia recently enacted a landmark law banning under-16s from accessing social media, including TikTok, with hefty fines of up to AU$50 million for noncompliance.
TikTok expressed disappointment, warning the law could push young users to less regulated parts of the internet.
In Europe, TikTok was forced to remove an engagement feature in its TikTok Lite version after EU regulators raised concerns about its addictive nature.
The feature rewarded users aged 18 and older with points redeemable for goods based on time spent on the app.
TikTok also faces criticism for its role in spreading hazardous challenges, some of which have reportedly led to child deaths, such as the blackout challenge.
Disinformation remains a significant issue, with a study by NewsGuard revealing that one-fifth of videos on topical subjects like the Russia-Ukraine war contained misleading or false information.
Despite these controversies, TikTok remains a dominant force in social media, attracting creators and influencers worldwide.
Its powerful algorithm and innovative features have secured its place at the forefront of digital engagement.
However, the platform continues to grapple with mounting scrutiny over its practices and societal impact.
TikTok’s meteoric rise has reshaped the social media landscape, cementing its status as a global powerhouse with over 1.04 billion monthly active users worldwide as of 2024.
This milestone, achieved in less than a decade, underscores TikTok’s unparalleled growth trajectory compared to platforms like Facebook and Instagram, which took significantly longer to reach similar heights.
In the United States alone, 170 million people actively use the app, contributing to its $16 billion U.S. revenue in 2023.
Globally, TikTok engages over a quarter of social media users and nearly one-fifth of internet users monthly, with U.S. adults spending an average of nearly an hour daily on the platform.
Its popularity is further evidenced by 137 million downloads in the first quarter of 2024.
Since its 2018 launch, TikTok has grown from 55 million users to over a billion, fueled by its dynamic algorithm and appeal across diverse demographics.
Nigerian Communications Commission (NCC) has hosted a virtual stakeholders’ forum to discuss the draft Application-to-Person (A2P) licensing framework.
The event, held on December 20, aimed to address challenges in the international A2P messaging space in Nigeria, including consumer protection, fraud prevention and industry fairness.
Dr. Aminu Maida, executive vice chairman (EVC)/ceo, Nigerian Communications Commission who was represented by Mrs. Chizua Whyte, Ag. Head, Legal and Regulatory Services of NCC, said A2P messaging plays a vital role in today’s digital world.
“A2P messaging drives efficiency, enhances communication and supports socio-economic development.
“It has become the go-to platform for businesses to send notifications, whether transactional, promotional or service-related, directly to consumers,” Whyte said.
She emphasized the importance of effective regulation, stressing that the NCC’s strategic focus is centered on three key stakeholders: the government, consumers and the industry.
Whyte noted that the proposed framework seeks to foster innovation, ensure fair and transparent operations and protect consumers.
“The NCC firmly believes that effective regulation stems from inclusivity and collaboration.
“This forum is an opportunity for all of us – operators, aggregators, businesses, service providers and consumers – to engage in meaningful discussions,” she said.
The commission presented the various feedbacks received as inputs into the A2P Licensing Framework and gave NCC’s responses to each of the observations and recommendations made by the licensees.
Mrs. Truddy Tony-Awusaku, Assistant Director at the Licensing and Authorisation Department of the NCC, presented an overview of the framework for international A2P messaging in Nigeria.
The NCC assured stakeholders that it would continue to engage internal and external stakeholders ahead of the final draft of the A2P Messaging Services Licensing Framework.
The commission invited stakeholders to provide feedback and recommendations to refine the framework and create a sustainable A2P messaging ecosystem.
Group Advocates for Digital Rights at 2024 Internet Governance Forum
From Niche App to Global Giant: TikTok’s Controversial Journey
Aero Contractors Celebrates Long-Serving Employees at Award Ceremony
PalmPay, Jumia Reward Users in Festive Campaign
Ride the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas
UBA Group Sets Foot in France with Full Banking Services
FG Begins N50 Electronic Levy Deductions from Moniepoint, Other Digital Banks
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
Nigeria Risks Missing out on $1.2 Trillion AI Opportunity- NigComSat
Firm Sues NIMC, Others On Digital Rights Breach Allegations
E-Business2 days agoRide the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas
Telecom2 days agoNCC Holds Virtual Forum on A2P Licensing Framework
News2 days agoPalmPay, Jumia Reward Users in Festive Campaign
Telecom4 hours agoFrom Niche App to Global Giant: TikTok’s Controversial Journey
Telecom4 hours agoGroup Advocates for Digital Rights at 2024 Internet Governance Forum
Broadcasting4 hours agoAero Contractors Celebrates Long-Serving Employees at Award Ceremony