Telecom
NCC Discovers Cyber Threats to Windows Platforms, Routers
The Nigerian Communications Commission (NCC), through its Computer Security Incidents Response Team (CSIRT), has discovered two new separate cyber threats targeting Windows Platforms and a particular kind of routers respectively.
The commission through a statement issued by Dr. Ikechukwu Adinde, Director, Public Affairs, said that the discoveries were made known in two separate advisories released by the cyber-space protection team earlier this week.
The first cyber threat is a ransomeware known as ‘Lokilocker’, which is capable of wiping data from all version of Windows systems or platforms. It causes data loss, and denial of service (DoS), which reduces user’s productivity.
“Lokilocker”, is a relatively new ransomware that has been discovered by security researchers and belonging to the ransomware family. Lokilocker operates by encrypting user files and renders the compromised system useless if the victim does not pay the demanded ransom in time.
To hide the malicious activity, the ransomware displays a fake window update screen, cancel specific processes and services, and completely disables the task manager, windows error reporting, machine firewall and windows defender of the compromised system.
Sadly, it also has in-built processes that prevent data recovery as it deletes backup files, shadow copies, and removes system restore points. It also overwrites the user login note and modifies original equipment manufacturer (OEM) information in the registry of the compromised system.
Thus, the NCC CSIRT states: “To protect against infections by LokiLocker and similar ransomware, the best rule is to always have a backup copy of your data, which should be stored offline,” the advisory stated.
Additionally, according to CSIRT, “all downloads and email attachments should be opened with caution, even if they are from trusted sites or senders. Users should also ensure they attachments are scanned with an up-to-date antimalware solution, before opening.”
The second cyber threat discovered by the NCC CSIRT is a Botnet that targets the Microtik version of Routers. As CSIRT revealed, thousands of routers from Microtik which have been found to be vulnerable are being used to constitute what has been named one of the largest botnets in history
This botnet exploits an already-known vulnerability, which allows unauthenticated remote attackers to read arbitrary files and authenticated remote attackers to write arbitrary files, due to a directory traversal vulnerability in the WinBox interface. The vulnerability which was previously fixed allowed the perpetrators to enslave all the routers and then rent them out as a service.
In accordance with new research published by Avast, a cryptocurrency mining campaign taking advantage of the newly disrupted Glupteba botnet as well as the famed Trickbot malicious software were found to have been disseminated by the very same command-and-control (C2) server.
The C2 server functions as botnet-as-a-service, which controls nearly 230,000 vulnerable MicroTik routers. The Botnet, however, has been linked to what is now called the Meris Botnet.
The threat types emanating from the botnet include bypass authentication, data loss, denial of service, remote code execution, sniff password and unauthorized access. These situations result in dangers to victims of this cyber threat including malware distribution, mining cryptocurrency, thereby increasing the use system resources, remote code execution and data theft.
To be protected against this botnet, NCC CISRT asdvised users to update or apply the latest patches to their routers early, set strong router passwords, disable the administration interface of the routers from the public, stay away from illegitimate or cracked software versions of legitimate applications, and use decent antivirus software with in-built web-filtering, and apply the latest patches as soon as they arrive.
Paradigm Initiative (PIN), a leading pan-African organisation dedicated to advancing digital rights and inclusion in the Global South, has made significant contributions to the just-concluded 2024 Internet Governance Forum (IGF) in Riyadh, Saudi Arabia.
PIN’s participation in the prestigious global event underscores the organisation’s commitment to fostering inclusive digital policies and ensuring that Africa’s voices are central in global discussions about the future of the internet.
During the week-long forum, PIN team members played key roles in numerous sessions, emphasising the importance of a digital rights perspective in the development of emerging technologies, advocating for a more inclusive digital future, and addressing the specific challenges the African continent faces in terms of digital access and inclusion.
PIN Executive Director, ‘Gbenga Sesan, spoke at high-profile sessions, including the Leadership Panel on ‘The Internet We Want’, which outlined the vision for a global internet that is accessible, secure, and inclusive.
At the Africa Youth IGF Parley, ‘Gbenga provided a platform for young Africans to address pressing issues such as internet restrictions, the digital divide, and digital rights violations.
Adeboye Adegoke, Senior Manager for Grants and Programmes Strategy at Paradigm Initiative, contributed to Open Forum #12, advocating for policies that ensure a rights-respecting and inclusive digital future. His discussions highlighted the importance of policies that place human rights at the core of technological advancements.
Ihueze Nwobilor, Senior Programmes Officer, spoke at the session, ‘A Rights-Respecting Approach to Emerging Tech Development,’ where he called for the prioritisation of human rights in the development and deployment of emerging technologies across Africa and beyond.
The organisation’s Senior Manager for Partnerships and Engagements, Thobekile Matimbe, shared valuable insights during the ‘Better Products and Policies Through Stakeholder Engagement’ session.
She emphasized the role of the private sector in engaging with local communities to ensure that digital products and policies are inclusive and meet the needs of vulnerable groups across Africa.
Bridgette Ndlovu, PIN Partnerships and Engagements Officer, moderated a session on ‘Implementation of the USF in 26 African Countries,’ where she and other speakers, including ‘Gbenga Sesan, discussed the crucial role of Universal Service Funds (USF) in advancing digital inclusion, particularly in underserved and rural areas.
PIN’s participation at IGF 2024 has been an important moment for advocating digital rights in Africa. “Paradigm Initiative’s participation was a powerful reminder that Africa’s digital future must be shaped by inclusive, rights-respecting policies.
“Our participation at the IGF is a continuous demonstration of the need for all stakeholders to collaborate in building a more inclusive and accessible internet for everyone, especially those in under-served communities,” PIN Executive Director, ‘Gbenga Sesan stated.
Lagos-based financial technology firm Patricia Technologies has commenced repayments to customers impacted by a 2022 security breach. This follows a two-year period where the company focused on recovering funds and rebuilding trust.
In 2022, Patricia experienced a significant cyberattack, resulting in the loss of over 600 million Naira from customer accounts. Following the breach, the company temporarily restricted withdrawals and collaborated with law enforcement, leading to the arrest of several suspects, including a prominent politician.
Patricia had previously requested a two-to-five-year repayment window, a plan that has now begun to be implemented. The company has started disbursing funds to affected customers in phases, with the first batch of payments initiated on December 10, 2024.
CEO Hanu Fejiro emphasized the company’s commitment to its customers, stating, “This repayment process represents a milestone in fulfilling our promise to make things right.”
He encouraged customers to update their information on the Patricia platform and monitor official channels for further updates on their individual repayment timelines.
Subscribers who are getting paid in this phase have since been officially notified by email. One of the subscribers, with initials BP (for purposes of confidentiality), expressed appreciation and satisfaction with being paid by Patricia via an email reaction: “I really appreciate your effort. Though it took a long time, I’m satisfied with what I’ve received. Thank you for keeping to your words.”
TikTok’s rise from a niche video-sharing app to a global social media giant has sparked controversies worldwide, with concerns over its links to China and its influence on users and politics.
In Albania, Prime Minister Edi Rama announced Saturday that TikTok would be banned for at least a year starting in 2025.
The decision follows a tragic incident in Tirana where a 14-year-old was killed and another injured in a fight stemming from an online confrontation. Rama described TikTok as the “thug of the neighborhood.”
In Romania, the European Union is investigating whether TikTok played a role in far-right candidate Calin Georgescu’s unexpected first-round presidential election victory.
The probe focuses on alleged Russian interference and claims of “preferential treatment” by TikTok. This marks the platform’s third EU investigation, potentially risking fines of up to six percent of its global revenue.
TikTok stated it has implemented “robust actions” to combat election misinformation, while Russia denies meddling.
In the United States, TikTok faces mounting pressure after the government passed a law in April requiring ByteDance, its Chinese parent company, to divest from the platform by January 2025.
The U.S. claims TikTok allows China access to American user data, a claim TikTok denies. ByteDance admitted its employees had accessed U.S. user data but insisted it does not share information with Chinese authorities.
TikTok could face a nationwide ban if ByteDance fails to comply, threatening its 170 million U.S. users.
Australia recently enacted a landmark law banning under-16s from accessing social media, including TikTok, with hefty fines of up to AU$50 million for noncompliance.
TikTok expressed disappointment, warning the law could push young users to less regulated parts of the internet.
In Europe, TikTok was forced to remove an engagement feature in its TikTok Lite version after EU regulators raised concerns about its addictive nature.
The feature rewarded users aged 18 and older with points redeemable for goods based on time spent on the app.
TikTok also faces criticism for its role in spreading hazardous challenges, some of which have reportedly led to child deaths, such as the blackout challenge.
Disinformation remains a significant issue, with a study by NewsGuard revealing that one-fifth of videos on topical subjects like the Russia-Ukraine war contained misleading or false information.
Despite these controversies, TikTok remains a dominant force in social media, attracting creators and influencers worldwide.
Its powerful algorithm and innovative features have secured its place at the forefront of digital engagement.
However, the platform continues to grapple with mounting scrutiny over its practices and societal impact.
TikTok’s meteoric rise has reshaped the social media landscape, cementing its status as a global powerhouse with over 1.04 billion monthly active users worldwide as of 2024.
This milestone, achieved in less than a decade, underscores TikTok’s unparalleled growth trajectory compared to platforms like Facebook and Instagram, which took significantly longer to reach similar heights.
In the United States alone, 170 million people actively use the app, contributing to its $16 billion U.S. revenue in 2023.
Globally, TikTok engages over a quarter of social media users and nearly one-fifth of internet users monthly, with U.S. adults spending an average of nearly an hour daily on the platform.
Its popularity is further evidenced by 137 million downloads in the first quarter of 2024.
Since its 2018 launch, TikTok has grown from 55 million users to over a billion, fueled by its dynamic algorithm and appeal across diverse demographics.
Group Advocates for Digital Rights at 2024 Internet Governance Forum
Patricia Technologies Begins Repayments to Customers Affected by 2022 Security Breach
CBN Permits BDC Operators to Buy FX from NAFEM During Festive Season
From Niche App to Global Giant: TikTok’s Controversial Journey
Aero Contractors Celebrates Long-Serving Employees at Award Ceremony
UBA Group Sets Foot in France with Full Banking Services
FG Begins N50 Electronic Levy Deductions from Moniepoint, Other Digital Banks
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
Nigeria Risks Missing out on $1.2 Trillion AI Opportunity- NigComSat
Firm Sues NIMC, Others On Digital Rights Breach Allegations
E-Business2 days agoRide the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas
Telecom2 days agoNCC Holds Virtual Forum on A2P Licensing Framework
News2 days agoPalmPay, Jumia Reward Users in Festive Campaign
Telecom8 hours agoFrom Niche App to Global Giant: TikTok’s Controversial Journey
Telecom8 hours agoGroup Advocates for Digital Rights at 2024 Internet Governance Forum
Broadcasting8 hours agoAero Contractors Celebrates Long-Serving Employees at Award Ceremony
Telecom8 hours agoPatricia Technologies Begins Repayments to Customers Affected by 2022 Security Breach
E-Financial8 hours agoCBN Permits BDC Operators to Buy FX from NAFEM During Festive Season