News
ngCERT warns Nigerians over surge in stolen email credentials driving cybercrime – Technology Times
Stay connected via Google News
The Nigerian Computer Emergency Response Team (ngCERT) has issued a cybersecurity advisory warning Nigerians and organisations across the country about the rising threat posed by stolen email passwords and login credentials.
Compromised accounts are increasingly being used to enable cybercrime, identity theft, financial fraud and other online attacks, the nation’s internet watchdog said.
The agency raised concerns over the large volume of email credentials exposed through data breaches and subsequently traded on dark web marketplaces and underground forums, where cybercriminals purchase them for malicious use.
According to ngCERT, billions of compromised email credentials are currently circulating online, making email accounts one of the most attractive targets for cyber attackers globally.
“Organisations and individuals are strongly advised to treat email security as a priority and take immediate steps to safeguard their accounts,” ngCERT said.
“Organisations and individuals are strongly advised to treat email security as a priority and take immediate steps to safeguard their accounts,” ngCERT said.
Credential theft and automated attacks on the rise, ngCERT says
The advisory explained that cybercriminals routinely harvest usernames, passwords and personal information leaked during data breaches, before selling the data in bulk to other attackers.
These attackers then deploy automated tools to test stolen credentials across multiple online platforms in a technique known as credential stuffing.
Because many users reuse the same passwords across different services, attackers are often able to gain access to multiple accounts using a single set of compromised login details.
ngCERT noted that once email accounts are breached, attackers can access sensitive communications, financial records, personal data and password reset links linked to other online services.
According to the agency, this allows cybercriminals to escalate access across multiple platforms associated with the same email address, significantly increasing the potential scale of damage.
Risks of identity theft, fraud and business email compromise
The advisory warned that successful exploitation of stolen email credentials can lead to unauthorised access to personal and corporate accounts, identity theft and financial fraud through misuse of banking and payment information.
It further highlighted that compromised accounts can be used to launch Business Email Compromise (BEC) attacks and sophisticated phishing campaigns. Because such messages originate from trusted email addresses, they are often more convincing and harder for victims to detect.
ngCERT also warned that exposed email accounts may lead to the leakage of sensitive personal and organisational data, potentially resulting in reputational damage, operational disruptions and significant financial losses.
The agency noted that the rapid expansion of digital services and online transactions has further elevated the importance of email security, as email accounts often serve as the central gateway to multiple personal and business platforms.
Security recommendations for users, organisations
To reduce exposure to cyber threats, ngCERT advised users to create strong and unique passwords for each email account and enable Multi-Factor Authentication (MFA) wherever available.
The agency also urged internet users to avoid password reuse across platforms and consider using reputable password managers to securely generate and store complex credentials.
As part of its guidance, ngCERT encouraged users to regularly check whether their email addresses have appeared in known data breaches using the Have I Been Pwned repository. Users whose credentials are found in breach databases are advised to change passwords immediately and closely monitor accounts for suspicious activity.
Additionally, the agency recommended vigilance against phishing attempts, caution against clicking suspicious links or attachments, and activation of login notifications to detect unauthorised access attempts in real time.
Organisational cyber hygiene, awareness
For organisations, ngCERT advised regular review of account access logs, deployment of spam filtering and anti-phishing systems, and strengthened cybersecurity awareness training for employees.
The agency also emphasised the importance of educating staff and family members on safe email practices and the risks associated with credential exposure.
According to ngCERT, improving awareness, strengthening authentication mechanisms and adopting strong digital hygiene practices remain critical to mitigating the growing threat posed by stolen email credentials and related cyberattacks.
Stay ahead with real-time reports, breaking news, and exclusive insights delivered directly to your phone. Don’t settle for outdated information. Join TECHNOLOGYTIMES NEWS on WhatsApp for 24/7 updates.
Join Our Whatsapp Channel
News
From Producing Nigerian Internationals to Building Their Own Stadium: Buruj Sports Academy Takes Bold Step as Ikorodu Football Dream Attracts Investors
Buruj Sports Academy is turning years of grassroots football success into an ambitious infrastructure project, unveiling a proposed stadium development in Ikorodu, Lagos State, aimed at transforming opportunities for young Nigerian footballers.
The academy, founded by Dr. Waheed Salaudeen, has presented a new development layout featuring a standard 105m × 68m football pitch, spectator stand, changing rooms, administrative and first-aid facilities, toilets, parking spaces and perimeter security.
The project represents a significant step toward establishing a permanent home for the academy’s growing football development programme.
Buruj’s ambitions are backed by its record of nurturing promising talents, including former Nigeria Under-15 internationals Raheem Moyinoluwa Salaudeen and Fawas Ayomide Adeleke, who represented Nigeria in youth competitions in Morocco and Algeria.
The academy has also facilitated opportunities for players in Spain and Lithuania, while six Buruj youngsters recently earned selection for an international football exposure programme following the Italian Consulate General U-20 Tournament.
Unlike its earlier three-acre, 5,000-seat stadium concept, the latest architectural proposal adopts a more practical, phased approach, beginning with an approximately 80–100-seat stand and essential football facilities. Punch Newspapers +1
Dr. Salaudeen, who serves as founder and Chief Executive Officer, has consistently championed football development alongside education.
“This dream is bigger than Buruj Sports Academy alone. We are appealing to private individuals, corporate organizations, investors, and well-meaning Nigerians to support this vision.”
His appeal reflects a determination to build a sustainable sporting institution capable of serving generations of young Nigerians. Sports247 Nigeria +1
For potential investors, the project offers opportunities in stadium naming rights, facility sponsorship, youth development partnerships, football tournaments and community sports programmes.
With a survey document and proposed layout now presented, Buruj is inviting partners to help turn its vision into reality, subject to necessary technical assessments and development approvals.
From discovering football stars to building the infrastructure that produces them, Buruj Sports Academy is no longer simply dreaming of the future — it is preparing to build it.
The African Democratic Congress (ADC) has postponed the flag-off of its presidential campaign in Sokoto State, earlier scheduled for Saturday, October 31, to Wednesday, November 4.
The party’s Presidential Campaign Council in Sokoto State announced the postponement in a press statement issued on Wednesday, and signed by its Director-General, Bello Aliyu Goronyo.
According to the statement, the decision was taken to address certain planning and coordination issues to ensure the successful conduct of the campaign event.
The council appealed to party leaders, stakeholders, supporters and members of the public to take note of the new date, while expressing regret over any inconvenience caused by the change in schedule.
“The African Democratic Congress (ADC) Presidential Campaign Council in Sokoto State wishes to announce the postponement of its Presidential Campaign Flag-off, earlier scheduled for Saturday, 31st October 2026, to Wednesday, 4th November 2026,” the statement read.
Explaining the reason for the change, the council said, “The decision follows the need to address certain planning and coordination considerations to ensure the successful conduct of the event.”
“The Campaign Council regrets any inconvenience the change may cause and sincerely appreciates the understanding, patience and continued support of party leaders, stakeholders, supporters and members of the public,” Goronyo added.
He urged all concerned to take note of the new date and expressed the council’s readiness to welcome party leaders, supporters and other stakeholders to the event.
The postponement comes amid reports of difficulties involving hotel accommodation in Sokoto ahead of the campaign flag-off originally scheduled for Saturday.
Reports had emerged that hotel rooms were being booked ahead of the planned ADC event, with allegations that some hotel owners were refusing to release rooms to prospective guests.
The development comes as the ADC continues preparations for the 2027 general election, with former Vice President Atiku Abubakar as the party’s presidential candidate.
The party is seeking to strengthen its support across the country as opposition parties prepare to challenge President Bola Tinubu and the ruling All Progressives Congress in the forthcoming presidential election.
Earlier on Wednesday, the ADC Presidential Campaign Council at the national level disowned an unsigned campaign timetable circulating on social media, urging party members, supporters and other stakeholders to disregard the document.
The council said the timetable, which contained proposed dates and locations for campaign rallies and other political activities across the country, had not been authorised by the campaign organisation.
In a statement signed by the Director of Media and Publicity of the ADC Presidential Campaign Council, Kola Ologbondiyan, the party clarified that the document did not originate from the council or its campaign office.
“The African Democratic Congress Presidential Campaign Council (ADC-PCC) has disowned an unsigned campaign timetable currently in circulation, clarifying that the document did not emanate from the Council or its campaign office,” the statement said.
Ologbondiyan urged party members and stakeholders to wait for official announcements regarding the campaign schedule.
“Accordingly, all members and stakeholders are urged to disregard the document and await official communications from the ADC-PCC on campaign activities and schedules,” he added.
The unsigned timetable listed Sokoto State as the proposed starting point for the presidential campaign on October 31, 2026, and outlined proposed activities in several other states before a closing rally scheduled for Adamawa State on January 11, 2027.
The document also contained proposed dates for rallies, town hall meetings and other political engagements in states including Kebbi, Zamfara, Ogun, Oyo, Rivers, Delta, Edo, Cross River, Anambra, Enugu, Ebonyi, Abia, Benue, Plateau, Kaduna, Kano and Borno.
-
News4 days agoTroops rescued 70 abductees, recovered N10 million ransom: DHQ
-
Business4 days ago
REA Ends 16 Years of Darkness in Two Kano Communities
-
Business3 days ago
CBD COP17: Nigeria, France Push for Faster Action on 30×30 Biodiversity Target
-
News3 days ago
AI delivers ‘zero financial payoff’ to most companies, Apollo economist says
