Headline

NCC Alerts Nigerians On New Ways Hackers Unlock, Steal Vehicle, Android Apps

Published

3 years ago

May 15, 2022

Editor

The Nigerian Communications Commission (NCC) says it wishes to alert telecom consumers and members of the public on an ongoing cyber-vulnerability that allows a nearby hacker to unlock vehicles, start their engines wirelessly and make away with the cars.

It said that the fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this danger, where hackers take advantage to unlock and start a compromised car.

According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack, in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.

The Commission said that with this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether.

“Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly.

“The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.

However, the NCC-CSIRT, in the advisory, has offered some precautionary measures that could be adopted by car owners to prevent falling victim to the attack.

According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter.”

It said that vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.

Importantly, the Commission said that car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.

It explained that the PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit.

The RKE system, according to the Commission, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.

Additionally, in a related advisory, the NCC, based on another detection by CSIRT, informed the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store.

This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.

It said that the malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process.

Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.

As a consequence, it explained further that a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.

“It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible,” the Commission said.

It warned that to avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users must avoid downloading unnecessary apps or installing apps from unofficial sources.

The NCC also said it wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.

The NCC recommended that unauthorised transactions be checked against any installed app, DAILY POST reports.

“Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software,” the Commission said in a statement signed by Dr. Ikechukwu Adinde, its Director of Public Affairs.

Headline

Trump Administration Proposes New Rule Limiting Nigerians, Others

Published

15 hours ago

August 28, 2025

Editor

The Trump administration has unveiled a proposal that would restrict the length of time international students can remain in the United States for their studies.

According to the Department of Homeland Security (DHS), the regulation, which is expected to be published on Thursday, would impose a four-year cap on student visas and other categories of temporary admissions.

According to Fox News, the DHS said the proposal is part of efforts to curb “visa abuse” and strengthen the government’s ability to “properly vet and oversee these individuals.”

It added that some students have “taken advantage of U.S. generosity” and become “forever” students by staying enrolled in colleges to prolong their residence.

“For too long, past Administrations have allowed foreign students and other visa holders to remain in the U.S. virtually indefinitely, posing safety risks, costing untold amount of taxpayer dollars, and disadvantaging U.S. citizens,” a DHS spokesperson stated.

“This new proposed rule would end that abuse once and for all by limiting the amount of time certain visa holders are allowed to remain in the U.S., easing the burden on the federal government to properly oversee foreign students and their history,” the spokesperson continued.

Currently, F visa holders may stay in the U.S. for the “duration of status,” meaning the period they are enrolled full-time. The new proposal would allow stays for the length of a programme but would not permit them to exceed four years, generally less than the time needed for postgraduate studies.

Foreign journalists would also be affected. Under the plan, they would receive an initial admission period of 240 days, with the possibility of a single extension for another 240 days, but not longer than their assignment.

The DHS said regular assessments would provide “proper oversight” and help reduce the number of people residing in the U.S. on temporary visas.

But education experts warned the measure could hurt universities financially. International students typically pay higher tuition and have fewer opportunities for scholarships, which contributes significantly to the financial support of American colleges.

“It will certainly act as an additional deterrent to international students choosing to study in the United States, to the detriment of American economies, innovation, and global competitiveness,” Fanta Aw, executive director and CEO of NAFSA: Association of International Educators, said in a statement to Politico.

Headline

Russia Hits Ukraine With ‘Massive’ Deadly Overnight Strikes

Published

19 hours ago

August 28, 2025

Editor

Russian forces launched a “massive” attack on Kyiv on Thursday, hitting the Ukrainian capital with strikes that killed at least four people and wounded around 30 others, Ukrainian officials said.

The attack came as Moscow and Kyiv traded blame over an impasse in diplomatic efforts towards a peace deal spearheaded by US President Donald Trump.

AFP journalists in Kyiv witnessed powerful explosions that illuminated the night sky and left behind a column of smoke.

Ukraine’s Interior Minister Igor Klymenko said the strikes killed four people and wounded “about 30 people.”

Those killed included a 14-year-old girl, while five children aged seven to 17 were among those who sustained “injuries of varying severity,” Tymur Tkachenko, the head of the city’s military administration, said.

Mayor Vitali Klitschko described the strikes as a “massive attack” that caused damage in several districts of the capital.

Tkachenko said Moscow had fired ballistic and cruise missiles as well as Iranian-designed Shahed drones from different directions to “systematically” target residential buildings.

Red tracer bullets sailed through the night sky in an effort to intercept drones above the city centre, an AFP journalist saw. At least one missile appeared to be shot down.

Around 100 people took refuge in a subway station, with some lying in sleeping bags and others holding their pets.

A five-story building in the Darnytsky district had collapsed, and a shopping mall was hit in the city centre, Klitschko reported.

– Ukrainian attacks on Russia –
Kyiv suffered one of its worst attacks of the over three-year war on July 31, leaving more than 30 people dead including five children.

Ukrainian officials also reported a Russian strike in the southeastern Zaporizhzhia region on Thursday.

Russian authorities said they destroyed over 100 Ukrainian drones overnight. A Ukrainian attack sparked a fire at an oil refinery in the Krasnodar region but caused no casualties, according to local officials.

Russian forces have been slowly but steadily gaining ground in Ukraine in recent months, as diplomatic efforts have accelerated.

Trump held a high-profile summit with Russian President Vladimir Putin in Alaska this month, followed by a meeting with his Ukrainian counterpart Volodymyr Zelensky and European allies.

But there has been little progress since then.

Before concluding any peace agreement, Ukraine wants security guarantees from the West to deter any future Russian attacks.

Moscow has cast Kyiv’s demands as unrealistic and has raised particular objection to the notion of stationing Western peacekeeping troops in Ukraine.

Zelensky said on Wednesday that members of his administration would meet with US officials in New York on Friday.

The Ukrainian leader said he saw “very arrogant and negative signals from Moscow regarding the negotiations”, urging extra “pressure” to “force Russia to take real steps”.

AFP

Headline

Two US Pastors Arrested In $50m Human Trafficking, Fraud Case

Published

19 hours ago

August 28, 2025

Editor

Two church leaders in the United States have been arrested in an alleged multi-million-dollar conspiracy after multiple Federal Bureau of Investigation raids across the country on Wednesday, including one in Hillsborough County’s exclusive Avila neighborhood.

In a statement issued via its website on Wednesday, the U.S. Department of Justice said Michelle Brannon, 56, was arrested at a mansion near Tampa, while David Taylor, 53, was arrested in North Carolina over allegations of multi-million dollar money laundering, forced labour and human trafficking.

According to the DOJ, Taylor and Brannon are the leaders of Kingdom of God Global Church, formerly known as Joshua Media Ministries International.

The Justice Department said Taylor referred to himself as “Apostle” and to Brannon as his Executive Director.

FBI officials said law enforcement arrested Brannon early Wednesday at 706 Guisando De Avila in Hillsborough County, which is owned by the church, according to property records.

Investigators arrested Taylor on Wednesday morning in North Carolina, while SWAT and FBI agents also raided a hotel owned by the church in Houston.

A 10-count indictment alleged that Taylor and Brannon ran call centres in Florida, Texas, Missouri, and Michigan to solicit donations to the church.

The pair convinced their victims to work at the call centres and work for Taylor as personal servants – referred to as “armour bearers” – for long hours without pay, according to the indictment.

Federal investigators said Taylor and Brannon “controlled every aspect of the daily living of their victims,” who slept at the call centre or in a “ministry” house and were not allowed to leave without permission.

The indictment also says the suspects forced the victims to transport women to Taylor and ensure that those women took Plan B emergency contraceptives.

The church received about $50 million in donations through its call centres dating back to 2014, according to the DOJ.

Taylor and Brannon are accused of using much of that money to buy luxury properties, luxury vehicles, and sporting equipment such as boats, jet skis, and ATVs.

Taylor and Brannon face charges of forced labour, conspiracy to commit forced labour, and conspiracy to commit money laundering.

Each alleged crime carries a maximum sentence of 20 years in federal prison.

A federal grand jury in the Eastern District of Michigan returned a 10-count indictment against two defendants for their alleged roles in a forced labour and money laundering conspiracy that victimised individuals in Michigan, Florida, Texas, and Missouri.

Assistant Attorney General Harmeet Dhillon of the Justice Department’s Civil Rights Division said the two defendants were arrested in North Carolina and Florida in a nationwide takedown of their forced labour organistion.

“Combating human trafficking is a top priority for the Department of Justice.

“We are committed to relentlessly pursuing and ending this scourge and obtaining justice for the victims,” he said.

Also speaking, U.S. Attorney Jerome Gorgon Jr. for the Eastern District of Michigan, said, “We will use every lawful tool against human traffickers and seek justice for their victims.

“A case like this is only possible through a concerted effort with our federal partners across the country and the non-governmental agencies who provide victim support. We thank them all.”

“The indictment of David Taylor and Michelle Brannon demonstrates the FBI’s steadfast efforts to protect the American people from human exploitation and financial crimes, including forced labour and money laundering.

“The alleged actions are deeply troubling. I want to thank the members of the FBI Detroit Field Office, with strong support from our federal and agency partners in the FBI Tampa Field Office, FBI Jacksonville Field Office, FBI St. Louis Field Office, FBI Charlotte Field Office, FBI Houston Field Office, and the Detroit IRS-CI Field Office, in addition to several local, county and state law enforcement partners, for their role in executing this multi-state operation.

“The FBI in Michigan will continue to investigate those who violate federal law and remain focused on ensuring the protection and safety of our nation,” said Acting Special Agent in Charge Reuben Coleman of the FBI Detroit Field Office.

“Money laundering is tax evasion in progress, and in this case, the proceeds funded an alleged human trafficking ring and supported a luxury lifestyle under the guise of a religious ministry.

“IRS-CI stands committed to fighting human trafficking and labor exploitation, and pursuing those who hide their profits gained from the extreme victimization of the vulnerable,” said Special Agent in Charge Karen Wingerd of IRS Criminal Investigation, Detroit Field Office.

According to the DOJ, conspiracy to commit forced labour carries up to 20 years’ imprisonment and a fine up to $250,000, while forced labour carries up to 20 years’ imprisonment and a fine up to $250,000.

It noted that conspiracy to commit money laundering carries up to 20 years’ imprisonment and a fine up to $500,000 or twice the value of the properties involved in the money laundering transactions.

It was gathered that Brannon appeared in federal court in Tampa on Wednesday afternoon, but an attorney for Brannon wasn’t present.

A judge asked where her attorney was and whether she had representation.

Brannon told the judge that she had two private attorneys, out of St. Louis and Oklahoma, who were already working with them. However, she said she hadn’t heard from either of them.

The judge said the attorneys were not able to be reached through the phone numbers provided to federal prosecutors. It’s not clear if Brannon has legal representation at this point.

The judge continued Brannon’s hearing to Thursday afternoon. He instructed Brannon to find an attorney in the Tampa area in the meantime.