AI-powered fraud threatens telecom security, banking – NCC

The Nigerian Communications Commission (NCC) has warned that AI-powered cyber threats are increasingly targeting Nigeria's telecommunications infrastructure, banking system, and national security. At the second International Cybersecurity Conference in Abuja, the NCC's Executive Vice-Chairman, Dr. Aminu Maida, highlighted the evolving sophistication of AI-driven attacks, including targeted phishing, automated credential theft, deepfakes to circumvent multi-factor authentication, and self-mutating malware.

These threats could potentially disrupt critical sectors such as finance, defense, and governance. Dr. Maida emphasized that AI has accelerated cybercrime, enabling attacks to be carried out at speeds beyond traditional security defenses. He cited recent instances of AI-enabled attacks, such as supermarket refrigeration system hacking in France and a spyware campaign targeting Middle Eastern journalists and media personnel.

Nigeria's designation of telecommunications as Critical National Information Infrastructure underscores the urgency of safeguarding networks against such cyberattacks. The commission has established a Computer Security Incident Response Team to monitor threats, share intelligence, and enforce incident reporting. It has also introduced a Cyber Resilience Framework to set security standards for telecom operators.

The NCC urges operators to adopt zero-trust security models, regularly audit AI for vulnerabilities, and design networks that can rapidly recover from attacks. The National Information Technology Development Agency (NITDA) is collaborating with the Office of the National Security Adviser, the National Assembly, and others to review the Cybercrime Act, develop a national cybersecurity architecture, and bolster digital sovereignty.

The Attorney-General of the Federation and Minister of Justice is working on legislative reforms to enhance electronic evidence management, investigations, and prosecutions while safeguarding fundamental rights. The Senate Committee on ICT and Cybersecurity has proposed a cybersecurity resilience index to evaluate organizations' preparedness, as well as stronger collaboration among government agencies and regional cooperation on digital security.