By using this site, you agree to the Privacy Policy and Terms & Conditions.
Accept
Okay.ngOkay.ng
  • News
    • Politics
    NewsShow More
    INEC Chairman, Mahmood Yakubu
    INEC: Fuel Scarcity May Affect Elections Logistics
    January 31, 2023
    Ekweremadu, wife appear in UK court over alleged organ harvesting
    January 31, 2023
    Old Naira Banknotes to be Accepted at CBN after February 10 Deadline
    January 31, 2023
    Emefiele: CBN to Continue Accepting Old Naira Notes After February 10 Deadline
    January 31, 2023
    NNPC Takes Over Addax Petroleum Assets
    January 31, 2023
  • Entertainment
    EntertainmentShow More
    Imo Poly graduate apologises over controversial remark
    January 31, 2023
    Abdulrasheed Bello (JJC Skillz)
    JJC Skillz Calls for Collaboration in Black History Month Track and Video
    January 30, 2023
    Police arrest popular Kano TikTok star
    January 29, 2023
    Singer, Chuddy K loses wife
    January 28, 2023
    Yeni Kuti
    Infidelity: I Can Only Leave if My Partner Sleeps with Another Man – Yeni Kuti
    January 27, 2023
  • Business & Economy
    Business & EconomyShow More
    Emefiele: CBN to Continue Accepting Old Naira Notes After February 10 Deadline
    January 31, 2023
    NNPC Takes Over Addax Petroleum Assets
    January 31, 2023
    House of Representative
    Reps Rejects CBN’s 10-day Extension for Old Naira Notes Exchange
    January 29, 2023
    Why the CBN Decided to Give Nigerians More Time to Exchange Old Naira Notes
    January 29, 2023
    Central Bank of Nigeria (CBN)
    Deadline for Returning Old Naira Notes Remains January 31 – CBN
    January 28, 2023
  • Sport
    SportShow More
    Man United’s Eriksen ruled out for 3 months over injury
    January 31, 2023
    Osimhen shines as Napoli extend lead in Serie A title race
    January 30, 2023
    Djokovic Beats Tsitsipas to Clinch 10th Australian Open Title
    January 29, 2023
    BUA Group Brings Excellence to the 2023 Lagos International Polo Tournament
    January 27, 2023
    Kolo Toure
    Kolo Toure sacked by Wigan Athletic after winless reign
    January 27, 2023
  • Tech
    TechShow More
    SpaceX Launches Starlink Services in Nigeria: The First African Country to Receive Satellite Internet
    January 31, 2023
    Kashifu Inuwa
    Forbes Recognizes NITDA’s Kashifu Inuwa with Best of Africa Corporate Governance Award
    January 16, 2023
    NCC
    NCC Returns to Television with Telecom Weekly Program
    January 10, 2023
    MTN Nigeria Launches Thryve Ads to Support SMEs in Social Media Marketing
    January 6, 2023
    WhatsApp
    WhatsApp to End Support for Dozens of Devices on Dec 31st, 2022 – See List
    December 29, 2022
Reading: Beware of hacking group targeting Telcos, ISPs – NCC alerts
Share
Aa
Okay.ngOkay.ng
Aa
  • News
  • Entertainment
  • Business & Economy
  • Sport
  • Tech
Search
  • News
    • Politics
  • Entertainment
  • Business & Economy
  • Sport
  • Tech
Follow US
  • About Okay.ng
  • Advertising on Okay.ng
  • Contact Okay.ng
  • Okay.ng on WhatsApp
  • Careers
  • Submit News to Okay.ng
© OKN MEDIA PUBLISHING 2022 - All rights reserved
Tech

Beware of hacking group targeting Telcos, ISPs – NCC alerts

Muhammad A. Aliyu By Muhammad A. Aliyu Published November 15, 2021
Share
5 Min Read
NCC
SHARE

The Nigerian Communication Commission (NCC) has called on stakeholders in the country’s telecoms to be wary of an Iranian hacking group known as Lyceum.

The commission in a statement signed by its Director, Public Affairs at NCC, Dr. Ikechukwu Adinde, said the group have been reported to start targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage.

According to the statement, Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.

The advisory noted that the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.

- Advertisement -

The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.

By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunnelling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.

Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s backdoors, consisting of over 20 domains, including six that were previously not associated with the threat actors.

According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization. The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.

However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.

Specifically, telecom consumers and the general public are advised to:

1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).

2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.

3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.

4. Implement the use of Intrusion Prevention Systems that monitors your network.

5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.

6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.

7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.

For further technical assistance, contact ngCERT on [email protected].

The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space. This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.

TAGGED: Lyceum, NCC
Share this Article
Facebook Twitter Whatsapp Whatsapp Telegram Email Copy Link Print
What do you think?
Happy0
Love0
Sad0
Angry0
Joy0
Surprise0

Connect with Okay on Social

Facebook Like
Twitter Follow
Instagram Follow
Telegram Follow
- Advertisement -
Ad imageAd image
- Advertisement -
Ad imageAd image
- Advertisement -
Ad imageAd image

Recent Posts

INEC Chairman, Mahmood Yakubu
INEC: Fuel Scarcity May Affect Elections Logistics
News
Ekweremadu, wife appear in UK court over alleged organ harvesting
News
Imo Poly graduate apologises over controversial remark
Gist
Old Naira Banknotes to be Accepted at CBN after February 10 Deadline
News
Man United’s Eriksen ruled out for 3 months over injury
Sports
- Advertisement -

You Might Also Like

Tech

SpaceX Launches Starlink Services in Nigeria: The First African Country to Receive Satellite Internet

January 31, 2023
News

NCC, NLRC Sign Revised MoU to Combat Unapproved Lottery and Gaming Practices

January 19, 2023
Kashifu Inuwa
Tech

Forbes Recognizes NITDA’s Kashifu Inuwa with Best of Africa Corporate Governance Award

January 16, 2023
NCC
Tech

NCC Returns to Television with Telecom Weekly Program

January 10, 2023
Previous Next
Okay.ngOkay.ng
Follow US

© OKN MEDIA PUBLISHING 2022 - All rights reserved

  • About Okay.ng
  • Advertising on Okay.ng
  • Contact Okay.ng
  • Okay.ng on WhatsApp
  • Careers
  • Submit News to Okay.ng
Welcome Back!

Sign in to your account

Lost your password?