E-Business
Nigerian Security Agencies Use Israeli, US Technology for Forensic Surveillance of Journalists’ Phones

Technology developed by United States and Israeli firms were acquired by Nigerian security agencies for forensic surveillance of mobile phones of journalists, according to a report by the Committee to Protect Journalists (CPJ).

Pix credit… Technical Guruji
CPJ, an American independent non-profit, non-governmental organization, based in New York, promotes press freedom and defends the rights of journalists
According to CPJ, the Universal Forensic Extraction Device (UFED) is sold by an Israeli firm, Cellebrite, while the Forensic Toolkit (FTK) is the product of a US company, AccessData.
CPJ said UFED and FTK were used to extract information from phones and computers.
They are also used in breaking into locked devices and decripting information.
Besides Nigeria, other countries where CPJ reported the use of the devices by security agencies to extract information from journalists’ phones were Ghana and Botswana.
CPJ reported that a forensic search was carried out on the mobile phones and computer of the Regional Editor of Daily Trust in the North-East, Uthman Abubakar, after he was arrested by the Nigerian military in Maiduguri, Borno State, in 2019.
Abubakar’s phones and computer were seized while he was held for two days and interrogated about his sources concerning a report he wrote on a military operation.
He was eventually released without charges.
However, during the period the journalist was held, a forensic search was conducted on his phones and computer.
Seizure of journalists’ phones, computers, a global phenomenon
CPJ noted that the seizure of journalists’ mobile phones and computers – some of their most important working tools – was a global phenomenon.
“CPJ has documented device seizures around the world, from the United States to Slovakia to Iraq,” the journalists’ rights protection organisation said.
Also International Centre for Investigative Reporting (ICIR) has observed that several Nigerian journalists have had their mobile phones and computers seized by security agencies.
The seizures are mostly reported in situations where journalists use their phones to record videos and pictures which indict or incriminate the security agencies or political office holders.
Several journalists in Nigeria have also had their phones and computers seized when being questioned about their sources by security agents.
A correspondent of Cable, an online newspaper, Chinedu Asadu, told The ICIR that security agents tried to collect his phone after he recorded a political office holder sharing money at a polling unit during an election in Kogi State.
The security agents, who were working for the politician, wanted the incriminating videos deleted.
CPJ further reported that in Benin Republic, Police copied data from the seized computer of Editor of Nouvelle Economie newspaper Casmir Kpedjo, in April 2019.
CPJ added that when two of its staff were detained in November 2018, intelligent officers collected their phones and computers and boasted about Israeli technology that could extract information from the devices.
UFED and FTK were used to ‘successfully extract and analyse’ thousands of messages, contacts, images, audio and video files, as well as social media accounts and applications, according to an affidavit submitted in court by the Police in Botswana during the prosecution of Digital Editor and Co-founder of Botswana People’s Daily News website, Oratile Dikologang
Dikologang and three others were arrested by the Police in the course of an investigation over Facebook posts. But the journalist, who was detained in April 2020, said he was tortured and questioned over his reports.
According to CPJ, forensic technology designed to extract information from phones and computers was marketed and sold to law enforcement agencies around the world, including those in Nigeria.
Nigerian government spends billions on procurement of surveillance devices
From 2014 to 2017, the Nigerian government spent at least N127 billion on ‘surveillance/security equipment,’ according to a 2018 calculation reported by Paradigm Initiative, a Nigeria-based digital rights group.
“Evidence showed that these purchases were made for political reasons, especially by the authorities in power to monitor their adversaries and political opponents,” the report by Paradigm Initiative said.
Also, checks by The ICIR showed that the Nigerian government budgeted a total of N72.5 billion for procurement of surveillance equipment in the 2021 budget.
The amount includes the sum of N139.4 million allocated to the State Security Service (SSS) for procurement of a surveillance equipment – MG Eyes.
Nigerian security agencies have sweeping powers to search and seize phones, computers and other devices
Although the right to privacy is enshrined in Nigeria’s constitution, and law enforcement agents are required to obtain a judicial warrant to search computer systems under Nigeria’s 2015 Cybercrime Law. The 1962 Official Secrets Act provides sweeping powers for security agencies to grant themselves warrants to search and seize all materials considered as evidence, as well as arrest those suspected of committing offenses under the act.
Nigerian security agencies use UFED and FTK to extract information from mobile phones and computers.
CPJ reported that a source in the Nigerian law enforcement sector admitted that security forces used UFED and FTK to retrieve information from devices.
UFED is sold by an Israel-based company Cellebrite, which is owned by the Japan-based SUNCORPORATION, while FTK is sold by US-based AccessData Group.
Cellebrite’s website says the UFED product can extract and decode every ounce of data within digital devices. It added that the equipment is deployed in 150 countries.
Company records stolen by hackers and reported by VICE News in 2017 suggested client relationships with Russia, Turkey, and the United Arab Emirates.
US federal law enforcement agencies have also invested in the Cellebrite technology, according to media information and procurement information listed online.
A case study published in Cellebrite’s website disclosed that in Nigeria, authorities seized a drug lord’s Samsung phone during his arrest and extracted and analysed data from it using UFED.
In the same vein, The Washington Post reported in May 2019 that Cellebrite’s UFED was used in Myanmar to pull documents from the phones of then jailed Reuters journalists Wa Lone and Kyaw Soe Oo.
Cellebrite said it required clients to uphold the standards of international human rights law or it might terminate their agreements, according to the Washington Post’s report.
Also, Cellebrite’s terms and conditions state that products, software, and services are to be used in a manner that does not violate the rights of any third party.
But the firm did not respond to CPJ’s observations that the use of the product by security agencies would always violate rights of journalists.
AccessData advertises FTK as a tool to identify information on any digital device or system producing, transmitting or storing data, including from web history, emails, instant messages, and social media.
It also boasts capacity to decrypt files, crack passwords, and build a report, all with a single solution.
In 2011, System Trust, a Nigeria-based digital security company, established a sales partnership through DRS, a South Africa-based cybersecurity company, to distribute AccessData technology.
Nigerian officials failed to respond in the CPJ report.
Also, spokesmen of various Nigerian security agencies refused to react to the report when contacted by The ICIR.
Those contacted included spokesman of the Nigerian Army Muhammed Yerima; Nigerian Police Force Public Relations Officer Frank Mba, and spokesman of the SSS Peter Afunanya.
Separate Whatsapp messages sent to the officials were not replied.
However, there have been instances where security agencies targeted mobile phones while looking for ‘incriminating’ materials to use against journalists who are hounded for doing their job.
In 2010 the SSS detained a journalist in Akwa Ibom State Kufre Carter for allegedly leaking a phone conversation that detailed the internal crisis in the management of the COVID-19 pandemic in the state.
Kufre’s lawyer Inibehe Effiong, in a statement, disclosed that a director of operations of the SSS demanded the journalist’s mobile phone to enable the security agency to ‘extract the record and details’ of a purported audio conversation they alleged he had with a medical doctor.
Also, on October 21, 2020, two journalists from The Punch Newspapers Segun Odunayo and Femi Dawodu were assaulted by the Police who also seized their phones while they were covering the #EndSARS protests at the Alausa area in Lagos State.
E-Business
NIPOST Partners KLM on Global Mail Delivery

Nigerian Postal Service (NIPOST) has signed an international mail partnership with KLM Royal Dutch Airlines for improved delivery access to over 200 countries without middlemen.
Tolani Odeyemi, postmaster-general and chief executive officer of NIPOST, described the deal as a “major milestone” for the country’s logistics and postal sector.
In a statement on X on Monday, Odeyemi explained that the new agreement marks NIPOST’s first direct international airline partnership for several years.
“For a long time, NIPOST operated without any direct partnerships with international airlines, relying heavily on multiple third-party handlers,” the Postmaster-General stated. This often resulted in delays, higher costs, and uncertainty around the delivery of packages.”
She explained that under the new arrangement, KLM will directly handle all outbound international mail from Nigeria, eliminating the need for intermediaries.
“This translates to faster and more reliable delivery, reduced risk of loss or damage, lower handling charges, and access to over 200 countries through KLM’s global network,” the Postmaster-General stressed.
According to Odeyemi, NIPOST’s breakthrough came after it began settling long-standing debts owed to international carriers, a step she said was key to “rebuilding global trust” in Nigeria’s postal system.
She revealed that talks were also ongoing with Ethiopian Airlines to bolster regional and continental logistics, particularly on African and Eastern routes.
“Our goal is clear and unwavering: to connect Nigeria regionally and globally, efficiently, securely, and affordably,” Odeyemi asserted.
The NIPOST CEO described the development as a significant win for Nigerian businesses and small and medium-scale enterprises that rely on international shipping, stating, “You now benefit from quicker, more affordable international shipping, greater peace of mind with improved reliability, and new potential to reach and grow in global markets.”
Odeyemi commended the teams behind the scenes and pledged continued improvements in service delivery, adding that the deal signals a turning point for the agency.
E-Business
Why Even the Most Experienced can Fall Victim of AI Phishing Attacks

The evolution of AI is not only affecting various industries, but it has also transformed cybercriminals’ tactics. One alarming trend is the use of AI to enhance phishing scams, refining them, targeting specific individuals, and making these attacks almost impossible to recognise.
Kaspersky reviews how AI is changing phishing techniques and why even the most cyber-aware employees may fall for these scams.
According to a recent Kaspersky study, the number of cyberattacks experienced by organisations in the last 12-months is reported to have increased by nearly half (48%) in the Middle East, Turkiye and Africa (META) region.
The most ubiquitous threat came from phishing attacks, with 51% of those questioned in the META region reporting this type of incident. With AI becoming a more prevalent enabler for cybercriminals, over half of the respondents in META (53%) anticipate significant growth in the number of phishing attacks. In this text, Kaspersky examine how AI is used in phishing and why experience alone is sometimes not enough to avoid becoming a victim.
Personalisation through AI
Previously, phishing attacks relied on a generic mass message sent to thousands, hoping some of the recipients would fall for the bait. AI has changed this into scripting highly personalised phishing emails in large numbers. Using publicly available information like that on social media, job boards, and companies’ websites, these AI-powered tools can generate emails tailored to an individual’s role, interests, and communication style.
For example, a CFO might receive a fraudulent email that mirrors the tone and formatting of their CEO’s messages, including accurate references to recent company events. This level of customisation makes it exceptionally challenging for employees to distinguish between legitimate and malicious communications.
Deepfake technology
AI has also introduced deepfakes into the phishing arsenal. These are increasingly being leveraged by cybercriminals to create fake but highly accurate audio and video messages, crafted to reflect the voice and appearance of the executives they seek to impersonate.
For example, in one reported case, attackers used a deepfake to impersonate multiple members of staff during a video conference, convincing the employee to transfer approximately $25.6 million. As deepfake technology continues to advance, it is expected that such attacks will become more frequent and harder to detect.
Bypassing traditional defenses
Cybercriminals can manipulate the script of traditional e-mail filtering systems with the use of AI. By analysing and mimicking legitimate email patterns, AI-generated phishing emails can bypass security software detection. Machine learning algorithms can test and refine phishing campaigns in real time, enhancing their success rates and making them increasingly sophisticated.
Why experience is not enough
Even experienced employees are falling victim to these advanced phishing attacks. The level of realism and personalisation that AI can achieve may override the skepticism that keeps experienced professionals cautious. Moreover, AI-generated attacks often exploit human psychology, such as urgency, fear, or authority, pressuring employees into acting without double-checking the authenticity of the request.
Combatting AI-hyped phishing
To defend against AI-driven phishing attacks, organisations must adopt a proactive and multi-layered approach that emphasises comprehensive cybersecurity. Regular, up-to-date AI-focused cybersecurity awareness training is critical for employees, helping them identify the subtle signs of phishing and other malicious tactics.
Kaspersky Automated Security Awareness Platform can help with such training. Alongside this, businesses should implement robust security tools, such as Kaspersky Next and Kaspersky Security for Mail Server, capable of detecting anomalies in emails, such as unusual writing patterns or suspicious metadata.
A zero-trust security model also plays a vital role in minimising the potential damage of a successful attack. By restricting access to sensitive data and systems, this approach ensures that even if attackers breach one layer of security, they cannot compromise the entire network. Together, these measures create a comprehensive defense strategy, combining advanced technology with vigilant human oversight.
E-Business
10 Percent of Nigerians Affected by Data Breaches since 2004

At least 10 out of every 100 Nigerians have fallen victim to data breaches since 2004, according to a new report by global cybersecurity firm Surfshark, raising serious concerns about the country’s long-standing vulnerability to cyber threats.
Surfshark’s research is based on data gathered from 29,000 publicly available databases.
Each unique breached email address is treated as a separate user account, and breaches often include additional personal data such as passwords, phone numbers, IP addresses, and postal codes.
The data was anonymised before analysis, and countries with populations under one million were excluded from the study.
Findings of the report revealed that a staggering 23.2 million Nigerian user accounts have been compromised in the past two decades, an alarming figure in a country with an estimated population of over 230 million.
This includes 7.3 million unique email addresses and 13 million passwords leaked into the public domain.
“Cyberattacks remain a persistent and growing threat globally, and Nigeria is no exception,” Surfshark stated in its analysis.
Despite a significant 85 per cent drop in new data breaches in the first quarter of 2025, falling from the previous quarter’s numbers—Nigeria still recorded over 119,000 breached accounts during the period. This places the country 34th worldwide in total breach volume.
Even with the recent decline, the scale and depth of past breaches remain troubling.
According to the report, 56 percent of Nigerian users affected by breaches are at heightened risk of identity theft, extortion, and unauthorised access to their online accounts.
“In Q1 2025 alone, an estimated one Nigerian account was breached every minute,” Surfshark noted.
The global picture also shows a dramatic shift: the number of leaked accounts dropped 93 percent year-on-year—from nearly 974 million in Q1 2024 to just 68.3 million in Q1 2025.
Countries with the highest number of breaches include the United States (16.9 million), Russia (4.4 million), and India (4.2 million).
However, when adjusted for population, smaller nations like South Sudan, Spain, and Slovenia reported the highest breach density, with South Sudan recording 61 breached accounts per 1,000 residents.
Luís Costa, Surfshark’s research lead, warned that the downturn in breach numbers should not lead to a false sense of security.
“Cyberthreats are constantly evolving, and attackers are adapting their tactics. Strong security practices, frequent password updates, and enabling two-factor authentication remain essential,” Costa stated.
The report underscores the urgent need for improved cybersecurity infrastructure and public awareness in Nigeria, as millions remain exposed to potential exploitation due to past breaches.
- E-Business2 days ago
NIN: FG Increases DoB Update Fee by 75Percent to N28,574
- Broadcasting2 days ago
Afreximbank Unveils Third Edition of Short Film Competition ‘Creative Africa Nexus’
- General News2 days ago
NIMASA Embraces Technology to Strengthen Regulatory Mandate
- E-Business2 days ago
10 Percent of Nigerians Affected by Data Breaches since 2004
- Telecom2 days ago
MTN Commits $10Bn to Nigeria’s Digital Infrastructure
- E-Financial2 days ago
SEC Intensifies Fight Against Ponzi Schemes With Market
- News2 days ago
SERAP Challenges CBN to Publish Local Government Allocations
- News2 days ago
CFUIS Expands to Nigeria, Boosting U.S. Immigration and Business Opportunities