{"id":66900,"date":"2022-11-23T00:09:49","date_gmt":"2022-11-22T23:09:49","guid":{"rendered":"https:\/\/nationalwire.com.ng\/?p=66900"},"modified":"2022-11-23T00:09:49","modified_gmt":"2022-11-22T23:09:49","slug":"ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts","status":"publish","type":"post","link":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/","title":{"rendered":"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts"},"content":{"rendered":"

In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.<\/p>\n

\"\"Ukrainian cyber experts discovered the attack, which uses Vidar Malware (Vidar Stealer)\u00a0to steal Telegram session data, which in the absence of configured two-factor\u00a0 authentication and a passcode, allows unauthorized access to the victim’s telegram\u00a0 account and corporate account or network.<\/p>\n

The malware, which exploits unauthorized access to users\u2019 Telegram accounts and\u00a0corporate accounts to steal data, targets platforms across iOS, Android, Linux, Mac and\u00a0Windows Operating Systems.<\/p>\n

\u201cThe Ukrainian CERT alleged that a Somnia Ransomware was created to be used on\u00a0Telegram that tricks users to download an installer that mimics ‘Advanced IP Scanner’\u00a0 software, which contains Vidar Malware. The installer infects the system with the Vidar\u00a0stealer, which steals the victim’s Telegram session data to take control of their account.<\/p>\n

\u201cThe threat actors abuse the victim’s Telegram account in some unspecified manner to\u00a0steal VPN connection data (authentication and certificates). If the VPN account is not\u00a0protected by two-factor authentication passcode, the hackers use it to gain unauthorized\u00a0access to the victim’s employer’s corporate network\u201d, the alert and advisory states.<\/p>

\r\n
Advertisement<\/div>\r\n\t\t\t\t\t\t\t<\/a>\r\n \r\n\t\t\t\t\t\t\t<\/div>\n

\u201cOnce inside, the intruders conduct reconnaissance work using tools like Netscan,\u00a0Rclone, Anydesk, and Ngrok, to perform various surveillance and remote access\u00a0activities, and then deploy a Cobalt Strike beacon, exfiltrating data using the Rclone\u00a0program,\u201d the report stated.<\/p>\n

The CSIRT is the telecom sector\u2019s cyber security incidence centre set up by the NCC to\u00a0focus on incidents in the telecom sector and as they may affect telecom consumers and\u00a0citizens at large. The CSIRT also works collaboratively with ngCERT, established by the\u00a0Federal Government to reduce the volume of future computer risk incidents by\u00a0preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and\u00a0problems or related events.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.<\/p>\n","protected":false},"author":6,"featured_media":66552,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[23,17],"tags":[648],"coauthors":[2391],"class_list":["post-66900","post","type-post","status-publish","format-standard","has-post-thumbnail","","category-business","category-news","tag-ncc"],"yoast_head":"\nNCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts - National Wire<\/title>\n<meta name=\"description\" content=\"In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts - National Wire\" \/>\n<meta property=\"og:description\" content=\"In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/\" \/>\n<meta property=\"og:site_name\" content=\"National Wire\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-22T23:09:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1080\" \/>\n\t<meta property=\"og:image:height\" content=\"963\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Friday Ekeoba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#website\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/\",\"name\":\"National Wire\",\"description\":\"About Nigerians, Nigerian Business and Other Stories\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nationalwire.com.ng\/sub\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#primaryimage\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg\",\"contentUrl\":\"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg\",\"width\":1080,\"height\":963},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#webpage\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/\",\"name\":\"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts - National Wire\",\"isPartOf\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#primaryimage\"},\"datePublished\":\"2022-11-22T23:09:49+00:00\",\"dateModified\":\"2022-11-22T23:09:49+00:00\",\"author\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927\"},\"description\":\"In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to\",\"breadcrumb\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nationalwire.com.ng\/sub\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927\",\"name\":\"Friday Ekeoba\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/author\/friday\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts - National Wire","description":"In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/","og_locale":"en_US","og_type":"article","og_title":"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts - National Wire","og_description":"In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to","og_url":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/","og_site_name":"National Wire","article_published_time":"2022-11-22T23:09:49+00:00","og_image":[{"width":1080,"height":963,"url":"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Friday Ekeoba","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/nationalwire.com.ng\/sub\/#website","url":"https:\/\/nationalwire.com.ng\/sub\/","name":"National Wire","description":"About Nigerians, Nigerian Business and Other Stories","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nationalwire.com.ng\/sub\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#primaryimage","url":"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg","contentUrl":"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg","width":1080,"height":963},{"@type":"WebPage","@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#webpage","url":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/","name":"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts - National Wire","isPartOf":{"@id":"https:\/\/nationalwire.com.ng\/sub\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#primaryimage"},"datePublished":"2022-11-22T23:09:49+00:00","dateModified":"2022-11-22T23:09:49+00:00","author":{"@id":"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927"},"description":"In response to the discovery of a new attack that compromises victims\u2019 VPN (Virtual Private Network) accounts to","breadcrumb":{"@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-urges-adoption-of-two-factor-authentication-as-somnia-ransomware-targets-telegram-accounts\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nationalwire.com.ng\/sub\/"},{"@type":"ListItem","position":2,"name":"NCC-CSIRT Urges Adoption Of Two-Factor Authentication As Somnia\u00a0Ransomware Targets Telegram Accounts"}]},{"@type":"Person","@id":"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927","name":"Friday Ekeoba","url":"https:\/\/nationalwire.com.ng\/sub\/author\/friday\/"}]}},"_links":{"self":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/66900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/comments?post=66900"}],"version-history":[{"count":1,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/66900\/revisions"}],"predecessor-version":[{"id":66901,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/66900\/revisions\/66901"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/media\/66552"}],"wp:attachment":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/media?parent=66900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/categories?post=66900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/tags?post=66900"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/coauthors?post=66900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}