Facebook Twitter LinkedIn RSS
    Trending
    • From Coal to Code: Leo Stan Ekeh Rallies Young Innovators at Enugu Tech Festival
    • Agabi advocates for cyber sanity and responsible cyberspace in Nigeria
    • KongaPay Achieves Triple ISO Certification, Elevating Standards for Mobile Money Operators
    • SeerBit and Spectranet introduce ExpressPay for seamless Internet subscription payments
    • Breaking the Glass Ceiling: Women Speak Out on Workplace Discrimination and the Power of Collective Action
    • Game Changers: Innovations, Disruptions and the Future of Africa’s Digital Economy
    • Anambra State launches ambitious initiative to empower 1 million citizens with digital skills
    • Infobip powers next-gen fan experiences for MoneyGram Haas F1
    Facebook Twitter LinkedIn
    ITPulse.com.ngITPulse.com.ng
    • News
    • Interviews
    • Blogs
    • Analysis
    • Opinion
    • Videos
    • Press Releases
    • Pictures
    • Advertise
    ITPulse.com.ngITPulse.com.ng
    Home»News»Cyber threats to Windows Platforms and Routers on the prowl – NCC
    News 3 Mins Read

    Cyber threats to Windows Platforms and Routers on the prowl – NCC

    mmBy ITPulseMarch 31, 2022
    Facebook Twitter WhatsApp Pinterest LinkedIn Reddit Tumblr Email
    NITDA, Risk accessment solution, Cyber Security
    Share
    Facebook Twitter LinkedIn Pinterest Email

    The Nigerian Communications Commission (NCC) said it has discovered two new separate cyber threats targeting Windows Platforms and a particular kind of router respectively.

    The discoveries, which were made through the telecom regulator’s Computer Security Incidents Response Team (CSIRT), noted that the discoveries were made known in two separate advisories released by the cyber-space protection team earlier this week.

    According to NCC, the first cyber threat is ransomware known as ‘Lokilocker’, which is capable of wiping data from all versions of Windows systems or platforms. It causes data loss, and denial of service (DoS), which reduces user productivity.

    “Lokilocker”, is a relatively new ransomware that has been discovered by security researchers and belongs to the ransomware family. Lokilocker operates by encrypting user files and renders the compromised system useless if the victim does not pay the demanded ransom in time.

    To hide the malicious activity, the ransomware displays a fake window update screen, cancels specific processes and services, and completely disables the task manager, windows error reporting, machine firewall and windows defender of the compromised system.

    Sadly, it also has in-built processes that prevent data recovery as it deletes backup files, shadow copies, and removes system restore points. It also overwrites the user login note and modifies original equipment manufacturer (OEM) information in the registry of the compromised system.

    Meanwhile, to protect against infections by LokiLocker and similar ransomware, the best rule is to always have a backup copy of your data, which should be stored offline.

    Additionally, “all downloads and email attachments should be opened with caution, even if they are from trusted sites or senders. Users should also ensure their attachments are scanned with an up-to-date antimalware solution, before opening.”

    The second cyberthreat discovered by the NCC CSIRT is a Botnet that targets the Microtik version of Routers. As CSIRT revealed, thousands of routers from Microtik which have been found to be vulnerable are being used to constitute what has been named one of the largest botnets in history

    This botnet exploits an already-known vulnerability, which allows unauthenticated remote attackers to read arbitrary files and authenticated remote attackers to write arbitrary files, due to a directory traversal vulnerability in the WinBox interface. The vulnerability which was previously fixed allowed the perpetrators to enslave all the routers and then rent them out as a service.

    In accordance with new research published by Avast, a cryptocurrency mining campaign taking advantage of the newly disrupted Glupteba botnet as well as the famed Trickbot malicious software was found to have been disseminated by the very same command-and-control (C2) server. The C2 server functions as botnet-as-a-service, which controls nearly 230,000 vulnerable MicroTik routers. The Botnet, however, has been linked to what is now called the Meris Botnet.

    The threat types emanating from the botnet include bypass authentication, data loss, denial of service, remote code execution, sniffing password and unauthorized access. These situations result in dangers to victims of this cyber threat including malware distribution, mining cryptocurrency, thereby increasing the use of system resources, remote code execution and data theft.

    To be protected against this botnet, NCC CISRT advised users to update or apply the latest patches to their routers early, set strong router passwords, disable the administration interface of the routers from the public, stay away from illegitimate or cracked software versions of legitimate applications, and use decent antivirus software with in-built web-filtering, and apply the latest patches as soon as they arrive.

    Computer Security Incidents Response Team Telecom regulations
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email
    mm
    ITPulse
    • Website
    • Facebook
    • Twitter
    • LinkedIn

    ITPulse is a wholly information technology communication (ICT) news website, with a special focus on the African continent. The website provides up-to-date biz-tech news, analysis and comprehensive and thorough insight into the continent's ICT terrain

    Related Posts

    From Coal to Code: Leo Stan Ekeh Rallies Young Innovators at Enugu Tech Festival

    May 12, 2025

    Agabi advocates for cyber sanity and responsible cyberspace in Nigeria

    May 10, 2025

    KongaPay Achieves Triple ISO Certification, Elevating Standards for Mobile Money Operators

    May 7, 2025

    Leave A Reply Cancel Reply

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Latest Posts

    From Coal to Code: Leo Stan Ekeh Rallies Young Innovators at Enugu Tech Festival

    May 12, 2025

    Agabi advocates for cyber sanity and responsible cyberspace in Nigeria

    May 10, 2025

    KongaPay Achieves Triple ISO Certification, Elevating Standards for Mobile Money Operators

    May 7, 2025
    About
    About

    Itpulse.com.ng is a wholly information technology communication (ICT) news website, with special focus on the African continent. The website provides up-to-date biz-tech news, analysis and a comprehensive and thorough insight info the continent's ICT terrain.

    Contact us: editorial@itpulse.com.ng

    Facebook Twitter LinkedIn RSS
    Latest Posts

    From Coal to Code: Leo Stan Ekeh Rallies Young Innovators at Enugu Tech Festival

    May 12, 2025

    Agabi advocates for cyber sanity and responsible cyberspace in Nigeria

    May 10, 2025

    KongaPay Achieves Triple ISO Certification, Elevating Standards for Mobile Money Operators

    May 7, 2025
    Popular Posts

    Agabi advocates for cyber sanity and responsible cyberspace in Nigeria

    May 10, 2025

    Powering finance and healthcare: How Ayodele is building smarter systems that last

    November 8, 2022

    Establishing a consistent architecture for power supply reliability, By Dwibin Thomas

    November 8, 2022
    © 2017 - 2025 Itpulse. Designed by Max Excellence.
    • Terms & Conditions
    • Privacy Policy
    • Advertise
    • Contact Us

    Type above and press Enter to search. Press Esc to cancel.