• About
  • Advertise
  • Privacy & Policy
  • Contact
Wednesday, July 2, 2025
  • Login
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
Advertisement
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
No Result
View All Result
Home Business

NCC-CSIRT urges adoption of two-factor authentication as Somnia Ransomware-targets Telegram accounts

Ada Okafor by Ada Okafor
November 22, 2022
in Business
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

In response to the discovery of a new attack that compromises victims’ VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.

Ukrainian cyber experts discovered the attack, which uses Vidar Malware (Vidar Stealer) to steal Telegram session data, which in the absence of configured two-factor authentication and a passcode, allows unauthorized access to the victim’s telegram account and corporate account or network.

According to Reuben Muoka, the D8rector, Public Affairs of NCC, “the malware, which exploits unauthorized access to users’ Telegram accounts and corporate accounts to steal data, targets platforms across iOS, Android, Linux, Mac and Windows Operating Systems”.

He added: “The Ukrainian CERT alleged that a Somnia Ransomware was created to be used on Telegram that tricks users to download an installer that mimics ‘Advanced IP Scanner’ software, which contains Vidar Malware. 

“The installer infects the system with the Vidar stealer, which steals the victim’s Telegram session data to take control of their account. 

“The threat actors abuse the victim’s Telegram account in some unspecified manner to steal VPN connection data (authentication and certificates). 

“If the VPN account is not protected by two-factor authentication passcode, the hackers use it to gain unauthorized access to the victim’s employer’s corporate network”, the alert and advisory states.  

“Once inside, the intruders conduct reconnaissance work using tools like Netscan, Rclone, Anydesk, and Ngrok, to perform various surveillance and remote access activities, and then deploy a Cobalt Strike beacon, exfiltrating data using the Rclone program,” the report stated.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large. 

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

Previous Post

Okowa has constructed over 1,932km  roads project in Delta— Commissioner

Next Post

Mrs. Uba to oversee NYSC pending the appointment of substantive Director-General, says NYSC management 

Next Post

Mrs. Uba to oversee NYSC pending the appointment of substantive Director-General, says NYSC management 

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

https://youtu.be/FHyJ1Wr0FAk?si=0WVYI_2OR4OrIrQ4
https://youtu.be/gbE3azm_Io0?si=GdE3Mqelo1ujTNla
Reps commend Niger govt’s efforts to curb banditry 
News

Reps commend Niger govt’s efforts to curb banditry 

by Hassan Tanko
July 1, 2025
0

The House of Representatives has taken a significant step towards addressing the security challenges in Niger State by commending Governor...

Read moreDetails
Insecurity: Nigeria’s 800-strong Elite force ready

Insecurity: Nigeria’s 800-strong Elite force ready

July 1, 2025
2027: Atiku, Mark woo PDP leaders to embrace coalition

2027: Atiku, Mark woo PDP leaders to embrace coalition

July 1, 2025
FCTA to build new INEC HQ in Abuja

INEC to introduce new rules on review, declaration, return at elections

July 1, 2025
NNPCL announces milestone on AKK Pipeline, records 100% crude oil pipeline availability 

NNPCL announces milestone on AKK Pipeline, records 100% crude oil pipeline availability 

July 1, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Homepage

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng