• About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, October 10, 2025
  • Login
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
Advertisement
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
No Result
View All Result
Home News

NCC uncovers Cyber threats to Windows platforms, routers

Ezechukwu Malachy by Ezechukwu Malachy
April 1, 2022
in News
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

By Azuh Madu

The Computer Security Incidents Response Team (CSIRT) set up by the Nigerian Communications Commission (NCC) for the telecoms sector, has discovered two new separate cyber threats targeting Windows Platforms and a particular kind of routers respectively.

According to Dr. Ikechukwu Adinde, Director, Public Affairs at the Nigerian Communications Commission (NCC), in a statement, the discoveries were made known in two separate advisories made public by the cyber-space protection team earlier this week.

According to him, the first cyber threat is a ransomware known as ‘Lokilocker’, which is capable of wiping data from all version of Windows systems or platforms. 

“It causes data loss, and denial of service (DoS), which reduces user’s productivity.

“Lokilocker”, is a relatively new ransomware that has been discovered by security researchers and belonging to the ransomware family. Lokilocker operates by encrypting user files and renders the compromised system useless if the victim does not pay the demanded ransom in time,” he said. 

To hide the malicious activity, Dr. Adinde exolained that:the ransomware displays a fake window update screen, cancels specific processes and services, and completely disables the task manager, windows error reporting, machine firewall and windows defender of the compromised system. 

“Sadly, it also has in-built processes that prevent data recovery as it deletes backup files, shadow copies, and removes system restore points. 

“It also overwrites the user login note and modifies original equipment manufacturer (OEM) information in the registry of the compromised system.

“To protect against infections by Lokilocker and similar ransomware, the best rule is to always have a backup copy of your data, which should be stored offline,” the advisory stated.

Additionally, according to CSIRT, “all downloads and email attachments should be opened with caution, even if they are from trusted sites or senders. 

“Users should also ensure the attachments are scanned with an up-to-date antimalware solution, before opening,” he said.

The second cyber threat discovered by the NCC CSIRT, Adinde said, “is a Botnet that targets the Microtik version of Routers”. 

As CSIRT revealed, thousands of routers from Microtik which have been found to be vulnerable are being used to constitute what has been named one of the largest botnets in history.

“This botnet exploits an already-known vulnerability, which allows unauthenticated remote attackers to read arbitrary files and authenticated remote attackers to write arbitrary files, due to a directory traversal vulnerability in the WinBox interface. 

“The vulnerability which was previously fixed allowed the perpetrators to enslave all the routers and then rent them out as a service,” he said.

He noted that “in accordance with new research published by Avast, a cryptocurrency mining campaign taking advantage of the newly disrupted Glupteba botnet as well as the famed Trickbot malicious software were found to have been disseminated by the very same command-and-control (C2) server. 

“The C2 server functions as botnet-as-a-service, which controls nearly 230,000 vulnerable MicroTik routers. The Botnet, however, has been linked to what is now called the Meris Botnet.

“The threat types emanating from the botnet include bypass authentication, data loss, denial of service, remote code execution, sniff password and unauthorized access. 

“These situations result in dangers to victims of this cyber threat including malware distribution, mining cryptocurrency, thereby increasing the use system resources, remote code execution and data theft”.

He said that “to be protected against this botnet, NCC CISRT asdvised users to update or apply the latest patches to their routers early, set strong router passwords, disable the administration interface of the routers from the public, stay away from illegitimate or cracked software versions of legitimate applications, and use decent antivirus software with in-built web-filtering, and apply the latest patches as soon as they arrive”.

Previous Post

Minister inaugurates new NCC’s board member, Bindawa

Next Post

Boko Haram terrorists slaughter dozen ISWAP fighters, burn others in Gun Trucks

Next Post

Boko Haram terrorists slaughter dozen ISWAP fighters, burn others in Gun Trucks

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

https://youtu.be/FHyJ1Wr0FAk?si=0WVYI_2OR4OrIrQ4
https://youtu.be/gbE3azm_Io0?si=GdE3Mqelo1ujTNla
Maxcee Udeh: High flying musical wizkid on the loose
Entertainment

Maxcee Udeh: High flying musical wizkid on the loose

by Deji Akintola
October 10, 2025
0

18-year old 300-level Godfrey Okoye University Computer Science student, Chinazom Maximilian Udeh, aka Maxcee, is taking the university community spell-bound...

Read moreDetails
Sommie Maduagwu to be laid to rest October 18

Sommie Maduagwu to be laid to rest October 18

October 10, 2025
15 men robbed 18 flats in 15 minutes — Neighbour of late Arise News presenter, Sommie

Abuja: Police arrest killers of Arise TV staff Somtochukwu ‘Sommie’ Christelle Maduagwu

October 10, 2025
Shock as train attack victim meets his abductor in a Kaduna mosque

NRC generated N1.95bn revenue in Q1 2025 – NBS

October 10, 2025
Council of State okays repeal, reenactment of Police Fund Act

Council of State grant clemency to 175 convicts

October 10, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Homepage

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng