The Nigerian Communications Commission (NCC) has approved to disconnect Exchange Telecommunications operators in line with the Communications 2023 and it has also set guidelines for the procedure of granted approval to disconnect Telecommunications operators as regards the 2012 act in Nigeria

This was contained in a statement made to Forensic News on Friday, by the Director of Public Affairs, NCC, Reuben Mouka, who stated the NCC hereby notifies the public that approval has been granted for the disconnection of Exchange Telecommunications Limited (Exchange) from MTN Nigeria Communications Limited (MTN) as a result of non-settlement of interconnect charges.

He said that the exchange was notified of the application and was allowed to comment and state its case.

He noted that the Commission, having examined the application and circumstances surrounding the indebtedness, determined that the exchange does not have sufficient reason for non-payment of the interconnect charges

The statement read “The public is, therefore, requested to TAKE NOTICE that the Commission has approved the Disconnection of Exchange to MTN by Section 100 of the Nigerian Communications Act, 2003 and the”

“Guidelines on Procedure for Granting Approval to Disconnect Telecommunications Operators, 2012”

“At the expiration of 5 (Five) days from the date of this notice, MTN will discontinue passing voice and data traffic through Exchange and will, thereafter, utilise alternative channels in interconnecting with other Network Service Providers”

“Please note that this disconnection will subsist until otherwise determined by the Commission” Mouka stated.

Crypto hacking incidents surged in 2024, with total funds stolen increasing by 21.07% year-over-year to $2.2 billion, according to a report by blockchain analytics firm Chainalysis.

The number of individual hacking incidents also rose from 282 in 2023 to 303 in 2024.

While the first half of the year saw a sharp rise in hacking activity, with $1.58 billion stolen by July—84.4% higher than the same period in 2023—the trend slowed significantly in the latter half of the year.

Chainalysis suggests geopolitical factors may have contributed to this shift.

Shift in hacking targets
The report highlighted a shift in the types of platforms targeted by hackers. In prior years, decentralized finance (DeFi) platforms were the primary victims, largely due to their rapid growth and underdeveloped security protocols.

However, in 2024, centralized services were the main targets in the second and third quarters.

The report noted significant breaches recorded in the year which include $305 million stolen from DMM Bitcoin in May 2024, and the $234.9 million stolen from WazirX in July.

Private key compromises emerged as the most exploited vulnerability, accounting for 43.8% of stolen funds.

Hackers used advanced laundering techniques, funneling stolen crypto through decentralized exchanges (DEXs), bridges, and mixing services to obscure transaction trails.

“This shift in focus from DeFi to centralized services highlights the increasing importance of securing mechanisms commonly exploited in hacks, such as private keys. Private key compromises accounted for the largest share of stolen crypto in 2024, at 43.8%.,” Chainalysis stated in the report.

North Korea’s rising role in crypto hacks
According to the report, North Korea-linked hacking groups were responsible for $1.34 billion in crypto theft across 47 incidents in 2024—a 102.88% increase in value stolen compared to $660.50 million across 20 incidents in 2023.

This represents 61% of the total funds stolen and 20% of the year’s incidents.

North Korea’s state-sponsored hacking activities often fund weapons development programs and circumvent international sanctions.

The report noted an increase in both the frequency and scale of these attacks, with more exploits exceeding $100 million in value.

The report also uncovered sophisticated tactics employed by North Korean operatives, including the infiltration of crypto and Web3 companies.

Using false identities, third-party intermediaries, and remote work opportunities, North Korean IT workers compromised networks and operations.

The U.S. Department of Justice recently indicted 14 North Korean nationals accused of working as remote IT contractors at U.S. firms, generating over $88 million by stealing proprietary information and extorting employers.

In October, Nairametrics reported that the United States government had made a move to tackle the menace caused by the dreaded and notorious Lazarus group with strong ties to North Korea.

The US government filed two legal complaints on Oct 4 seeking to seize about $2.67 million worth of crypto assets stolen by the North Korean Lazarus group of hackers.

The filing revealed that the US government seeks to recover about 1.7 million in Tether which was stolen by the hackers in a 2022 exploit of the Deribit platform draining the options exchange platform of $28 million.

The North Korean-linked Lazarus group is a notorious entity of highly advanced hackers who are responsible for most of the biggest exploits in the crypto industry.

The group is dreaded for its sophisticated means of operation and its history of breaching complex platforms with top-notch security systems.

The Nigerian Communications Commission (NCC) has emphasised the need for inter-sectoral collaborations in order to enhance the much-needed resilience against reported emergent cyberthreats in the country’s cyberspace.

According to ConsumerConnect, Dr. Aminu Maida, Executive Vice-Chairman and Chief Executive Officer (EVC/CEO) of NCC, stressed this in his Keynote Address at the Opening Session of the Critical National Information infrastructure (CNII) Protection and Resilience Workshop Series for policymakers and sector regulators, held in Abuja, FCT.

The National Cybersecurity Coordination Centre (NCCC) of the Office of the National Security Adviser (ONSA) organised the forum.

Maida also advocated a speedy implementation of President Bola Ahmed Tinubu’s earlier Executive Order (EO) on the CNII protection in the Nigerian digital space.

The EVC/CEO of the Commission stated: “The CNII Order emphasises resilience—a principle that will ensure our networks can recover quickly from incidents, maintaining the trust of the public and businesses that rely on telecom infrastructure daily.”

In regard to the essence of stakeholder collaborations on achieving the set objective of protection the CNII in the ecosystem, Dr. Maida also disclosed under the leadership of the Office of the National Security Adviser, and in collaboration with key stakeholders from the Nigerian Government, information infrastructure operators, and relevant private sector organisations, “a Trusted Information Sharing Network (TISN) will be established to enhance information sharing and risk assessment related to Critical National Information Infrastructure.”

He equally stated: “This network will foster a crucial communication channel for sharing threats and vulnerabilities, promoting decentralised risk assessment and building capacity to implement effective security measures.”

In a related development, the ngCERT@ngCERTofficial, in a statement late October 2024, via its verified social media account after the launch of the Protection and Resilience Workshop Series, in Abuja, affirmed Malam Nuhu Ribadu, National Security Adviser, inaugurated a significant workshop series aimed at enhancing the protection and resilience of Nigeria’s Critical National Information Infrastructure (CNII-P).

It said the initiative followed the recently approved Order for the Designation and Protection of Critical National Information Infrastructure (DPCO).

“The inaugural event gathered stakeholders from government, regulatory bodies, and private organisations to develop strategies for safeguarding vital information assets,” the statement noted.

NSA harps on ‘critical need’ to secure telecoms, banking, energy and defence

Ribadu, in his opening remarks, stressed the critical need to secure sectors, including such as telecommunications, banking, energy, transportation, and defence, highlighting the potential grave consequences of disruptions.

NgCERT noted: “Key efforts include developing a Critical National Information Infrastructure Protection Plan (CNIIPP) and establishing a Trusted Information Sharing Network (TISN) to promote unified cybersecurity approaches.”

The statement likewise quoted Maida to have stressed “the urgency of implementing the Executive Order on CNII Protection, and called for collective action to safeguard telecommunications infrastructure.”

According to the Centre, other dignitaries in their goodwill messages applauded the NSA’s leadership.

They emphasised the importance of inter-sectoral collaboration to enhance resilience against cyberthreats, such as online fraud and cyber espionage in Nigeria’s cyberspace.

The National Information Technology Development Agency (NITDA) has revealed that foreign digital companies operating in the country, including Google, Microsoft, and TikTok, among others, paid a total of N2.55 trillion in taxes in the first half of this year, according to Nairametrics.

The Agency disclosed this in a statement issued on Tuesday by its Director of Corporate Communications & Media Relations, Mrs. Hadiza Umar, quoting data from the Federal Inland Revenue Service (FIRS) and the National Bureau of Statistics (NBS).

NITDA specifically, commended Google, Microsoft, X, and TikTok for their compliance with the Code of Practice for Interactive Computer Service Platforms/Internet Intermediaries.

The Code which was issued jointly by the Nigerian Communications Commission (NCC), National Broadcasting Commission (NBC), and NITDA outlines clear guidelines for promoting online safety and managing harmful content.

Regulation yielding positive results
While highlighting the impacts of the regulatory framework, NITDA noted that this has also boosted the government’s revenue through the payment of taxes by digital companies.

“Data from the Federal Inland Revenue Service (FIRS) and the National Bureau of Statistics (NBS) reveal that foreign digital companies, including interactive computer service platforms and internet intermediaries (such as social media platforms) operating in Nigeria, contributed over N2.55 trillion (approximately $1.5 billion) in taxes in H1 2024.

“This significant increase in revenue underscores the role of robust regulatory frameworks in shaping compliance and driving revenue growth in the digital economy,” NITDA stated.

Code compliance report

Providing an update on the level of compliance with the Code of Practice for Interactive Computer Service Platforms/Internet Intermediaries, NITDA said all the digital platforms have been making efforts to address user safety concerns in line with the Code and the platforms’ community guidelines.

The highlight of the overall statistics across all the platforms shows that:

The platforms received 4,125,283 (Four million, one hundred and twenty-five thousand, two hundred and eighty-three) registered complaints in 2023.

Content takedown: 65.8 million

Content removed and re-uploaded after appeal by users: 379,433

Closed and deactivated accounts: 12.09 million

While commending the progress made, NITDA emphasizes the need for continued collaboration and innovation to address emerging challenges and ensure a safer and more responsible digital space.

NITDA in June 2022 announced the Code, which seeks to regulate social media blogs and online publications.

Part of the Code dictates that internet platforms including social media must:

Act expeditiously upon receiving a notice from a user, or an authorised government agency of the presence of unlawful content on its Platform.

Act quickly to remove, disable, or block access to non-consensual content that exposes a person’s private areas, full or partial nudity, sexual act, deepfake, or revenge porn, where such content is targeted to harass, disrepute, or intimidate an individual.

Disclose the identity of the creator of information on its Platform when directed to do so by a Court order.

Provided that an order of this nature shall apply for the purpose of preventing, detecting, investigating, or prosecuting an offence concerning the sovereignty and integrity of Nigeria, public order, security, diplomatic relationships, felony, incitement of an offence relating to any of the above or in relation to rape, child abuse, or sexually explicit material.

Nairametric

There are plans by the Nigerian Communications Commission, (NCC) to drop the current framework for the use of the Application-to-Person (A2P) messaging communication, according to Technology Mirror.

The (A2P) messaging is a communication format in the telecommunications sector used to send Short Message Services (SMS) or sending notifications from an application directly to a recipient’s mobile phone.

A2P is initiated through the internet, but the text messages are transmitted over mobile networks reaching recipients via their cellular connection. This form of messaging is predominantly used by businesses and organisations to deliver bulk promotional or transactional messages, such as marketing campaigns, appointment reminders, announcements, product advertisements, and order status updates. A2P messaging serves as a critical communication channel for citizens, businesses and governmental Institutions alike.

According a document: DRAFT LICENCE FRAMEWORK FOR INTERNATIONAL APPLICATION TO PERSON (A2P) MESSAGING IN NIGERIA sighted by TechnologyMirror informing the stakeholders of a planned engagement with them in a stakeholders’ in a virtual meeting, the NCC said that the International A2P SMS service segment is not fully regulated, unlike the voice service segment.

In a notice inviting the stakeholders to the meeting, the Director of Public Affairs of the NCC, Mr Reuben Muoka assured that the Commission is committed to ensuring compliance with the provisions of the Nigerian Communications Act, saying that stakeholders should submit comments and contributions on the exposed A2P Framework on or before Thursday December 19th 2024.

Giving reasons for wanting to rejig the current framework, the NCC noted that Local Mobile Network Operators (MNOs) independently monetize international A2P SMS traffic, often using various technologies that may not be secure or known to the regulator.

It said further that individual operators set their tariffs, leading to distortions and inconsistencies in termination rates adding that revenue from International A2P traffic is currently collected by entities outside Nigeria, and that payments are made in foreign currencies, which do not flow into the country nor are the Companies taxed.

The NCC disclosed that presently, there is no specific regulation on A2P SMS, leading to a lack of visibility in the SMS market, potential formation of cartels, and reduced competition noting that the International SMS Service Ecosystem in Nigeria has not been fully brought under regulatory control. It has been observed that the excessive use of the Short Message Service has led to fraud, spam and illegal activities.

The expressed concern that if the present framework was not rejig, the problem is likely to worsen as mobile connectivity and digital services continue to grow exponentially stating, “to address these challenges, implementing a Centralized SMS Firewall is necessary. This system will regulate SMS exchanges, safeguard the integrity of short message communications and mitigate emerging threats. It will enable the Commission to maintain full regulatory oversight of the SMS service ecosystem, ensuring security and fraud control.”

Outlining what the Nigerian telecoms industry stands to gain from the rejigging, the NCC said that through the creation of a single platform, the Commission will have better control over the International A2P SMS traffic, ensuring compliance with regulations and improving market oversight.

The Commission said the new framework would offer it the ability to levy international A2P SMS traffic appropriately, ensuring revenues are collected within the country adding that revenues generated from international A2P SMS traffic will stay within Nigeria, contributing to the local economy and being subject to local taxation.

When fully operational the Commission said that there will be standardized tariffs and increased transparency will promote fair competition among operators, preventing monopolistic practices stressing that the framework would ensure the removal of fraud and unwanted traffic by enhancing security measures to detect and remove fraudulent and unwanted SMS traffic.

More significantly, the new framework is provide the Commission with complete visibility and control over the International SMS market segment to regulate it effectively and also secure the SMS Space by implementing security protocols to protect the SMS ecosystem while at the same time creating a new revenue stream for the government through Taxation and Levies
on International A2P SMS traffic.

The Nigerian Communications Commission (NCC) has given a January 9, 2025 deadline to all licensed operators to update their contact information in line with the Licensing Regulations 2019.

The directive is part of the NCC’s broader strategy to improve its regulatory framework, strengthen oversight, and bolster Nigeria’s telecommunications sector.

The Commission warned that failure to provide accurate and up-to-date information could result in sanctions, including fines, suspension, or license revocation. While specific penalties were not disclosed, the NCC emphasized the importance of accurate contact details in ensuring prompt responses to industry developments and maintaining effective engagement.

NCC’s Director of Public Affairs, Reuben Mouka, in a statement, said the licensees are required to report any changes to their contact details within seven days of occurrence. Updates are also to be submitted to the Commission’s eServices platform at https://eservices.ncc.gov.ng.

Details required are :

*Principal place of business: Including the postcode, geographic coordinates, and identifiable landmarks.

*Mailing address: If different from the physical location.

*Email contacts: Active and current addresses for effective communication.

*Contact numbers: Reachable and updated phone numbers.

*Personnel information: Names and details of individuals responsible for regulatory and operational matters.