Fidelity Bank Fidelity Bank Fidelity Bank
ADVERTISEMENT
  • Home
  • About us
  • Contact us
Friday, March 31, 2023
TheScript Nigeria
  • Home
  • International News
  • Local
  • Press Release
  • Economy
  • Crime
  • Business and Finance
  • Education
  • Guest Column
No Result
View All Result
  • Home
  • International News
  • Local
  • Press Release
  • Economy
  • Crime
  • Business and Finance
  • Education
  • Guest Column
No Result
View All Result
TheScript Nigeria
No Result
View All Result
Home Local

NCC-CSIRT Urges Adoption of Two-Factor Authentication as Somnia Ransomware Targets Telegram Accounts

thescript by thescript
November 23, 2022
in Local
0 0
0
Nigeria at 62: NCC’s Role in Ensuring Nigeria’s Independence is Sustained
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

In response to the discovery of a new attack that compromises victims’ VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.

Ukrainian cyber experts discovered the attack, which uses Vidar Malware (Vidar Stealer) to steal Telegram session data, which in the absence of configured two-factor authentication and a passcode, allows unauthorized access to the victim’s telegram account and corporate account or network.

The malware, which exploits unauthorized access to users’ Telegram accounts and corporate accounts to steal data, targets platforms across iOS, Android, Linux, Mac and Windows Operating Systems.

“The Ukrainian CERT alleged that a Somnia Ransomware was created to be used on Telegram that tricks users to download an installer that mimics ‘Advanced IP Scanner’ software, which contains Vidar Malware. The installer infects the system with the Vidar stealer, which steals the victim’s Telegram session data to take control of their account. 

“The threat actors abuse the victim’s Telegram account in some unspecified manner to steal VPN connection data (authentication and certificates). If the VPN account is not protected by two-factor authentication passcode, the hackers use it to gain unauthorized access to the victim’s employer’s corporate network”, the alert and advisory states.  

“Once inside, the intruders conduct reconnaissance work using tools like Netscan, Rclone, Anydesk, and Ngrok, to perform various surveillance and remote access activities, and then deploy a Cobalt Strike beacon, exfiltrating data using the Rclone program,” the report stated.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large. The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

Signed

Reuben Muoka

Director, Public Affairs

November 22, 2022

Recommended

oyetola

Osun Partners UNDP, Norwegian govt to Launch EWERS

1 year ago
buhari

President Buhari Participates In FEC Meeting From Daura, Covid-19 Vaccine, Border Reopening Top Agenda

2 years ago

Popular News

    Connect with us

    • Home
    • About
    • Contact
    • Terms of use
    Email Us: info@thescript.com.ng

    © 2021 TheScript Nigeria -Providing quality news and information that improves the quality of life.

    No Result
    View All Result
    • Home
    • International News
    • Local
    • Press Release
    • Economy
    • Crime
    • Business and Finance
    • Guest Column
    • Education

    © 2021 TheScript Nigeria -Providing quality news and information that improves the quality of life.

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In
    This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.