Telecom
NCC-CSIRT Warns of Yanluowang Ransomware, Calls for Stronger Security Measures
The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has urged organisations to adopt stronger cybersecurity measures like ensuring their employees use strong, unique passwords for every account and enabling multi-factor authentication (2FA) wherever it is supported to prevent ransomware attacks. It also advised organizations to ensure regular systems backup.
The NCC-CSIRT’s warning contained in its advisory of August 12, 2022, came after the Yanluowang threat actors gained access to Cisco’s network using an employee’s stolen credentials after hijacking the employee’s personal Google account containing credentials synchronised from their browser.
Ransomware is a malware designed to deny a user or organization access to files on their computer until they pay the attackers.
Cisco reported the security incident on its corporate network but said it did not identify any impact on its business although the threat actors had published a list of files from this security incident on the dark web on August 10.
NCC-CSIRT estimated potential damage from the incident to be critical while predicting that successful exploitation of the ransomware will result in ransomware deployment to compromise computer systems, sensitive products and customers’ data theft and exposure, as well as huge financial loss to organizations by incurring significant indirect costs and could also mar their reputations.
The team said, “The first step to preventing ransomware attacks is to ensure that employees are using strong, unique passwords for every account and enabling multi-factor authentication (2FA) wherever it’s supported.”
It further disclosed that “In response to the attack, Cisco has immediately implemented a company-wide password reset. Users of Cisco products should ensure a successful password reset.
“As a precaution, the company has also created two Clam AntiVirus signatures (Win.Exploit.Kolobko-9950675-0 and Win.Backdoor.Kolobko-9950676-0) to disinfect any potentially compromised assets. Clam AntiVirus Signatures (or ClamAV) is a multi-platform antimalware toolkit that can detect a wide range of malware and viruses.
“User education is critical in thwarting this type of attacks or any similar attacks, including ensuring that employees are aware of the legitimate channels through which support personnel will contact users, so that employees can identify fraudulent attempts to obtain sensitive information. “Organizations should ensure regular systems backup,” the advisory urged.
The Computer Security Incident Response Team (CSIRT) is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.
The CSIRT also work collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risks incidents by preparing, protecting and securing the Nigerian cyberspace to forestall attacks, problems or related events.
Nigerian Communications Commission (NCC) has issued a fresh directive mandating telecom operators to compensate subscribers when major service outages last longer than 24 hours.
The commission also mandated telecom licensees in Nigeria to inform consumers of major service outages on their networks through media channels, stating the cause(s) of the service interruption, and the area(s) affected by the service interruption/outage, as well as the time that would be taken to restore service.
Consumers must also be informed one week in advance where operators have planned service outages.
This development, contained in the “Directive on Reportage of Major Network Outages by Mobile Network Operators (MNOs),” is part of the Commission’s drive to ensure timely resolution of outages, enhance quality of experience for telecom consumers, and keep consumers informed.
According to the Directive, Mobile Network Operators, Internet Service Providers and other operators that provide last mile services will also provide proportional compensation, including extension of validity, as may be applicable and in line with the provisions of the Consumer Code of Practice Regulations, where any major network outage continues for more than 24 hours.
It identifies three types of major outages to include: Any network operational condition such as fibre cut due to construction/access issues/theft & vandalism and force majeure that impacts five per cent or more of the affected operator’s subscriber base or five or more Local Government Areas (LGAs); having an occasion of unplanned outage of, or complete isolation of network resources in 100 or more sites or five per cent of the total number of sites (whichever is less) or 1 cluster that lasts for 30 minutes or more; and lastly, any form of outage that can degrade network quality in the top 10 states based on traffic volume as specified by the Commission from time to time.
In furtherance of this, the Commission has further directed that all Major Outages are to be reported by operators through the Commision’s Major Outage Reporting Portal, which is accessible to the public through the Commission’s website, www.ncc.gov.ng. The portal additionally discloses the identity of the culprit responsible for the disruption.
Commenting on the Directive and the Major Outage Reporting Portal, the Director, Technical Standards and Network Integrity, Engr. Edoyemi Ogor stated that, “The Commission has trialed the reporting process and portal with operators for some months now before issuing the directive.
“By providing consumers and stakeholders in the telecommunications industry with timely and transparent information on network outages, we are entrenching a culture of accountability and transparency. This approach also ensures that culprits are held responsible for sabotage to telecommunications infrastructure.
“This also aligns with our broader commitment to the effective implementation of the Executive Order signed by President Bola Ahmed Tinubu, which designates telecommunications infrastructure as Critical National Information Infrastructure (CNII). It reinforces the need to safeguard these assets, given their centrality to national security, economic stability, and the everyday lives of Nigerians,” Engr Edoyemi Ogor said.
Telecom
Celebrating African Creativity: Made by Africa, Loved by the World’ Returns for Its Fifth Year
The “Made by Africa, Loved by the World” campaign is back for its fifth year, celebrating African creativity and global influence. This year’s theme, “Where Culture Meets Connection,” highlights how social media fosters conversations around cultural moments worldwide.
The campaign features three cinematic films premiering on the Meta Africa page, showcasing the groundbreaking work and personal stories of six dynamic African creatives.
These artists, from Nigeria, Kenya, Ghana, and South Africa, represent diverse disciplines, including rap, animation, dance, photography, fashion, and videography.
Here are some of the featured talents:
- Ladipoe (Nigeria) – A BET-nominated rapper known for blending global hip-hop with African rhythms.
- Fatboy Animations (Kenya) – An animation studio founded by Michael Muthiga, recognized by Forbes for its original African storytelling.
- Lisa Quama (Ghana) – A dancer who gained fame after appearing in Beyoncé’s “Already” music video.
- Gilbert Asante (Ghana) – A photographer and creative director featured in GQ and Glam Africa.
- David Tlale (South Africa) – A fashion designer whose bold designs have been showcased at major fashion events, including the Met Gala.
- Ofentse Mwase (South Africa) – A filmmaker with over 24 international awards for his unique visual storytelling.
Kezia Anim-Addo, Communications Director for Africa, Middle East & Turkey, emphasized that the campaign not only celebrates individual success stories but also showcases how culture and social media drive meaningful connections and inspiration.
Association of Telecommunications Companies of Nigeria (ATCON), has raised the alarm over a diesel supply crisis caused by an ongoing strike by the National Union of Petroleum and Natural Gas Workers (NUPENG).
Mr Tony Emoekpere, president, ATCON in a statement said that the fuel supply disruption is critically affecting telecom base stations, pushing them to the brink of a shutdown and threatening millions of mobile and internet users in the region.
“This strike, which stems from the persistent harassment of tanker and petroleum product drivers by police officers in Lagos State, has effectively halted all truck loading operations and fuel movements,” Emoekpere stated.
He explained that diesel supply to telecom infrastructure has been severely impacted, leaving critical sites with dangerously low fuel levels.
According to him, if urgent measures are not taken, the situation could escalate into a full-blown network blackout, disrupting essential services, including mobile and internet access, business operations, emergency response systems, and daily communications.
ATCON has called on the governors of Lagos and Ogun states to intervene immediately by facilitating the release of diesel from depots to telecom operators to prevent further deterioration of the situation.
“This is not just a telecom issue—it is a national emergency that could cripple economic activities and compromise public safety,” Emoekpere stressed.
The association also appealed to security agencies and petroleum unions to resolve the crisis swiftly to safeguard Nigeria’s connectivity and economic stability.
ATCON emphasised that a prolonged disruption in fuel supply to telecom infrastructure could have far-reaching consequences for both businesses and individuals who rely on stable communication networks for daily operations.
NCC Orders Telcos to Compensate Subscribers for Outages More than 24 Hours
Toll Collection on Lagos-Calabar Highway Begins December
NGX Clears Fidelity Bank MD of Insider Trading Allegations
CBN Introduces AML to Fight Financial Terrorism, Gives Banks Deadline
Peter Obi Denies Secret Meeting with Tinubu over Fidelity Bank
