NCC-CSIRT Implements Robust Measures to Combat Rising Malicious Account Takeover Threats

As the prevalence of Account Takeover (ATO) incidents continues to surge, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has taken proactive steps to counter the growing threat. With an alarming increase in reports received by the Nigeria Computer Emergency Response Team (ngCERT), the NCC-CSIRT has rolled out a series of preventive measures to safeguard individuals and organizations from falling victim to malicious account takeovers.

ATO attacks occur when cybercriminals illicitly obtain a user’s credentials, allowing them to compromise the individual’s account and paving the way for future cyberattacks. Once inside the account, these criminals change the user’s credentials, effectively locking the legitimate user out while providing cybercriminals unrestricted access.

The NCC-CSIRT has prescribed a comprehensive set of measures to mitigate the risk of ATO attacks. These include adhering to rules of password complexity and using distinct passwords for different accounts, a task simplified by employing password managers. Additionally, it is recommended to change passwords periodically, enable Multi-factor authentication (MFA) for all accounts, install up-to-date and effective anti-malware solutions on all devices, and stay informed about evolving phishing techniques while implementing preventative measures.

These measures have become essential in today’s reality, as cybercriminals have developed various methods for acquiring user credentials. Techniques like phishing, which involve sending malicious emails to trick targets into revealing sensitive information, are commonly employed. Furthermore, cybercriminals infect devices with malware, such as keyloggers, spyware, or banking Trojans, allowing them to gain unauthorized access to user credentials and seize control of accounts.

Brute-force attacks, another method employed by cybercriminals, involve automated scripts that guess multiple passwords in an attempt to find a successful match. Additionally, credential stuffing occurs when leaked usernames and passwords from one data breach are used to gain unauthorized access to other accounts, as individuals often reuse passwords across multiple platforms.

NCC-CSIRT has assigned a high probability to ATO attacks due to their potential for inflicting significant damage. The implications of such attacks are far-reaching, ranging from unauthorized fund transfers from banking apps to internal phishing within organizations, theft of sensitive information, and network infiltration through the compromised accounts of employees.

Established by the NCC to address cybersecurity incidents in the telecom sector, the CSIRT collaborates closely with ngCERT, which is responsible for preparing, protecting, and securing Nigeria’s cyberspace. Together, these organizations strive to reduce future computer-related risks, thwart attacks, and effectively safeguard both telecom consumers and citizens at large.

By implementing these robust measures, the NCC-CSIRT aims to fortify Nigeria’s digital landscape against the escalating threat of malicious account takeovers, thereby ensuring the security and integrity of individuals, organizations, and the nation’s cyber ecosystem.

NCC.gov.ng