• About
  • Advertise
  • Privacy & Policy
  • Contact
Wednesday, July 23, 2025
  • Login
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
Advertisement
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
No Result
View All Result
Home Business

NCC-CSIRT urges adoption of two-factor authentication as Somnia Ransomware-targets Telegram accounts

Ada Okafor by Ada Okafor
November 22, 2022
in Business
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

In response to the discovery of a new attack that compromises victims’ VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.

Ukrainian cyber experts discovered the attack, which uses Vidar Malware (Vidar Stealer) to steal Telegram session data, which in the absence of configured two-factor authentication and a passcode, allows unauthorized access to the victim’s telegram account and corporate account or network.

According to Reuben Muoka, the D8rector, Public Affairs of NCC, “the malware, which exploits unauthorized access to users’ Telegram accounts and corporate accounts to steal data, targets platforms across iOS, Android, Linux, Mac and Windows Operating Systems”.

He added: “The Ukrainian CERT alleged that a Somnia Ransomware was created to be used on Telegram that tricks users to download an installer that mimics ‘Advanced IP Scanner’ software, which contains Vidar Malware. 

“The installer infects the system with the Vidar stealer, which steals the victim’s Telegram session data to take control of their account. 

“The threat actors abuse the victim’s Telegram account in some unspecified manner to steal VPN connection data (authentication and certificates). 

“If the VPN account is not protected by two-factor authentication passcode, the hackers use it to gain unauthorized access to the victim’s employer’s corporate network”, the alert and advisory states.  

“Once inside, the intruders conduct reconnaissance work using tools like Netscan, Rclone, Anydesk, and Ngrok, to perform various surveillance and remote access activities, and then deploy a Cobalt Strike beacon, exfiltrating data using the Rclone program,” the report stated.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large. 

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

Previous Post

Okowa has constructed over 1,932km  roads project in Delta— Commissioner

Next Post

Mrs. Uba to oversee NYSC pending the appointment of substantive Director-General, says NYSC management 

Next Post

Mrs. Uba to oversee NYSC pending the appointment of substantive Director-General, says NYSC management 

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

https://youtu.be/FHyJ1Wr0FAk?si=0WVYI_2OR4OrIrQ4
https://youtu.be/gbE3azm_Io0?si=GdE3Mqelo1ujTNla
34,289 Nigerians secured US citizenship from 2020-2022 – Report
World

“Don’t travel there”, US in fresh security alert blacklists Kano, Imo, Rivers, 15 Nigerian states

by Aminu Danladi
July 23, 2025
0

The United States government has issued stark warning to its citizens over travel to Nigeria, placing the country under its Level...

Read moreDetails
Why Wike’s mockery of Obi demands Abati’s voice

Why Wike’s mockery of Obi demands Abati’s voice

July 23, 2025
Police in major breakthrough on Benue killings, arrest bandit arms supplier

Police in major breakthrough on Benue killings, arrest bandit arms supplier

July 23, 2025
Troops neutralize over 100 bandits in Warari operation

Troops neutralize over 100 bandits in Warari operation

July 23, 2025
Police rebukes CJTF, says no Boko Haram terrorist arrested in Lagos

Police arrest 567 suspects, rescue 17 kidnap victims in Adamawa

July 23, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Homepage

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng