Connect with us

News

NCC reveals how hackers can unlock, steal vehicles

Published

on

The Nigerian Communications Commission (NCC) has revealed an ongoing cuber-vulnerability that allows close-by hackers to unlock vehicles and wirelessly start their engines and make away with the car.

The NCC in the disclosure warns the telecommunication consumers and members of the public of the vulnerability to new Android trojan apps, noting, the fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this emergent danger, where hackers take advantage to unlock and start a compromised car.

According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.

With this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether. “Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly. The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.

However, the NCC-CSIRT, in the advisory, has offer some precautionary measures or solutions that can be adopted by car owners to prevent falling victim to the attack.

According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter. Additionally, vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.”
Importantly, car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.

The PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit. The RKE system, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.

Additionally, in a related advisory, the NCC, based on another detection by CSIRT, wishes to inform the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store. This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.

The malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process. Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.

As a consequence, a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.

It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible.

To avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users have been advised to avoid downloading unnecessary apps or installing apps from unofficial sources. The NCC also wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.

Conclusively, the NCC recommends that unauthorised transactions be checked against any installed app. Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software.

News

Governor Alia distances self from protest against Benue CJ

Published

on

As protest rocks Benue State against the Chief Judge, Justice Maurice Ikpembese for relocating the Benue Local Government Election Petitions Tribunal from Makurdi to Abuja, Governor Hyacinth Alia has distanced himself from the protest.

Protesters in their hundreds from Benue State took to the streets of Abuja on Monday, for a peaceful protest from the National Assembly to the Supreme Court to express their outrage over the Benue CJ’s decision.

Prior to Monday’s massive protest Justice Ikpembese raised security concerns and moved the Tribunal to Abuja, a development that triggered protest as they are saying the Tribunal would have remained in Makurdi for them to monitor proceedings.

The tribunal is currently handling disputes arising from the Benue State Local Government elections conducted on October 5, 2024.

Reports indicate that 93 petitioners, including aggrieved candidates from both the All Progressives Congress and the Peoples Democratic Party, have filed cases at the tribunal since October 17, 2024.

The Benue State Government, through the Attorney General and Commissioner for Justice and Public Order, Mr. Fidelis Mnyim, had questioned the CJ’s unilateral decision, noting that neither the governor nor his office had been formally notified.

Continue Reading

News

Shehu Sani debunks Governor Uba Sani’s alleged diversion of LG funds, challenges El-Rufai to publicly tender evidence

Published

on

Civil Rights Activist and former Senator representing Kaduna Central Senatorial District, Shehu Sani has debunked the former Governor, Malamn Nasir El-Rufai’s allegation that Governor Uba Sani has diverted the Local Government Councils allocation to buy properties abroad.

Shehu Sani said El-Rufai’s allegation is “falsely crafted to smear the name of of the Governor because of the N420 billion investigation hanging on him like the sword of damocles.”

Reacting to the allegation on Monday, Shehu Sani challenged the former Governor to release proofs of purchases of properties in South Africa, Seychelles and London by Uba Sani publicly.

He said, Kaduna people would not forget in a hurry how Nasir El-Rufai plundered the State in eight years as Governor of the State, stressing that he should stop pushing falsehood into the public space.

He said: “As Kaduna indigenes, we are all living witnesses to how El-Rufai plundered the State and now investigation has indicted him and he should face it rather than pushing falsehood into the public domain.

El-Rufai should be bold enough to show proofs linking governor Uba Sani in the purchase of properties in South Africa, Seychelles and London, then we will take him serious.

“But he should be ready answer for the whereabouts of N420 billion because that money is substantial enough to develop Kaduna State to an extent”, Shehu Sani maintained.

Continue Reading

News

Bill to establish National Cashew Production and Research Institute in Kogi passes first reading in Senate

Published

on

Senator representing Kogi East Senatorial District, Jibrin Isah Echocho

The Nigerian Senate has passed for first reading a Bill to establish the National Cashew Production and Research Institute to be sited at Idah in Kogi East Senatorial District after it was laid on Wednesday last week.

The Bill which was sponsored by Senator Jibrin Isah Echocho representing Kogi East Senatorial District said, the propsed research institute will be situated at Idah, headquarters of Igala kingdom and the institute will be charged with the responsibilities of cashew research, processing and boosting production for local and export consumption.

According to the documents of the proposed bill made available on Monday, it pointed out that the Federal Government could leverage on the abundant cashew production in Kogi East and by extension Kogi State and other parts of the country to ensure that the quality of cashew is processed in line with the global standards, notwithstanding that the current quality of cashew from Kogi State is sought all over the world.

He said the legal framework of the Research Institute will identify the value chain and processing, ensuring that at each level, there is job creation for the teaming youths and not just for the raw nuts to be exported, stating that the current handling of cashew nuts was unacceptable as it tended to bypass the needed revenue that would been generated into government coffers.

Senator Isah said: “This will not only improve the quality of cashew products but also provide support to farmers and cashew business owners in Kogi State, particularly in Kogi East, which is known for its high cashew production.

“The institute will also attract investment, create jobs, and ensure better pricing for cashew farmers, thereby strengthening the local economy in Kogi East, Kogi State and Nigeria at large.”

DAILY POST recalled that a fortnight ago, Kogi State government was urged by the State House of Assembly to safeguard cashew and other economic trees in the State by putting in place stringent measures against abuse.

The regulatory measures which the State parliament said will be put in place, urged the State government to enforce the laws with serious sanction for any erring persons and to also stop foreigners from accessing cashew farms in the State.

The resolution was the outcome of a motion sponsored by Hon. Oluwaseyi Bello representing Kabba Bunu State Constituency in the House of Assembly, adding that the State Ministry of Agriculture should properly monitor and regulate the activities of exploitative foreign businessmen in the interest of revenue for the State and security of the people.

Kogi continues to be the leading State in cashew production in Nigeria which the State government attributed to robust and sound agricultural policies.

The State Commissioner for Information and Communications, Kingsley Fanwo once said: “Kogi State is the biggest producer of cashew in Nigeria because of our sound agricultural policies geared towards empowering farmers with improved seedlings, mechanization, agrochemicals as well as creating an enabling environment for the private sector to invest in cashew production.”

Continue Reading

Trending


Address: 1st Floor, Nwakpabi Plaza, Suite 110, Waziri Ibrahim Crescent, Apo, Abuja
Tel: +234 7036084449; +234 7012711701
Email: capitalpost20@gmail.com | info@capitalpost.ng
Copyright © 2025 Capital Post