Connect with us

#Latest

NCC warns of hackers targeting telcos, ISPs

Published

on

Hacker Thumb
The Nigerian Communications Commission (NCC) has warned the public to be wary of another group of hackers orchestrating cyberespionage in the African telecoms space.
The commission, in a statement issued by the Director of Public Affairs, Dr Ikechukwu Adinde, stated that an Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa.
He said the hackers are using upgraded malware in recent politically motivated attacks oriented in cyberespionage.
Adinde added that the information about this cyberattack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT), saying the ngCERT rated the probability and damage level of the new malware as high.
According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.
The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.
By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).
Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.
Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s backdoors, consisting of over 20 domains, including six that were previously not associated with the threat actors.
According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization.
The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.
However, to guard against this kind of threat, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring are required by telecom companies and ISPs alike to stave off potential attacks.
Specifically, telecom consumers and the general public are advised to:
1.     Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
2.     Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
3.     Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
4.     Implement the use of Intrusion Prevention Systems that monitors your network.
5.     Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
6.     Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
7.     Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.
The NCC reiterated its commitment to ensuring networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyberattacks.

Author

Add your voice

0 comments

People reading currently

Climate Finance Climate Finance
Dev. Finance5 days ago

Kenya, Nigeria named as targeted countries for climate-blended finance deals

Nigeria and Kenya have been identified as the most frequently targeted countries for climate-blended finance flows in the past three...

FuturizeU supports development of innovative healthcare products in Africa FuturizeU supports development of innovative healthcare products in Africa
Social Entreprenuership3 months ago

FuturizeU supports development of innovative healthcare products in Africa

Futurize and AstraZeneca are investing in social entrepreneurs who are developing innovative products that are addressing healthcare equity and early...

Banjul International Airport in Gambia Banjul International Airport in Gambia
Dev. Finance3 months ago

Saudi Fund for Development advocates Climate Change Mitigation, Social Infrastructure Investments in Africa

  The Saudi Fund for Development (SFD) has advocated for the preservation of heritage projects in Africa through initiatives such...

Catalyst Fund Team Catalyst Fund Team
Climate & Environment3 months ago

Catalyst Fund Raises First Round of $40 million investment in African Climate Startups

The Catalyst Fund has achieved the initial close of its $40 million fund for investing in climate startups in Africa....

Paystack CEO, Shola Akinlade, buys majority stake in Aarhus Fremad Paystack CEO, Shola Akinlade, buys majority stake in Aarhus Fremad
Sports8 months ago

Paystack CEO, Shola Akinlade, buys majority stake in Aarhus Fremad

A Danish football club, Aarhus Fremad announced on Tuesday that it has sold  55 percent of its shares to the...

MRI is increasing survival rate of women with breast cancer- PPC MRI is increasing survival rate of women with breast cancer- PPC
Climate & Environment8 months ago

MRI is increasing survival rate of women with breast cancer- PPC

PPC Limited, Nigeria’s leading engineering and infrastructure development company with footprints across Nigeria’s healthcare landscape, says that the advancement of...

Adeleke versus Oyetola Adeleke versus Oyetola
Policy & Regulation8 months ago

Appeal court upholds Senator Ademola Adeleke’s win in Osun

The Court of Appeal Abuja has overturned the ruling of the Osun State Governorship tribunal and has declared Senator Ademola Adeleke...

Lawmaker demands revamp of bank e-payment platforms Lawmaker demands revamp of bank e-payment platforms
Dev. Finance8 months ago

Lawmaker demands revamp of bank e-payment platforms

The members of the House of Representatives have demanded that the Central Bank of Nigeria (CBN) direct banks to revamp...

CBN to destroy naira notes worth N6tn CBN to destroy naira notes worth N6tn
Economy8 months ago

We’ve disbursed N20bn to alleviate cash crunch, CBN tells NLC

The Central Bank of Nigeria (CBN) met with the leadership of the Nigeria Labour Congress (NLC) in Abuja on Thursday,...

 Apply for Amazon Accelerator programme for fintech founders  Apply for Amazon Accelerator programme for fintech founders
Opportunities8 months ago

 Apply for Amazon Accelerator programme for fintech founders

Application closes April 27, 2023 Today, Amazon Web Services’ Startup Loft Accelerator team announced the inaugural launch of its AWS...

Ad Blocker Detected!

Advertisements fund this website. Please disable your adblocking software or whitelist our website.
Thank You!

you're currently offline