NCC Warns Telecom Providers of Reported Cyber-Espionage Campaign

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has alerted telecommunications service providers to a reported cyber-espionage campaign targeting research institutions.

In an advisory issued on Saturday, October 3, 2026, the NCC-CSIRT identified the threat actor as UNC6508 and said the campaign reportedly exploited vulnerabilities in Research Electronic Data Capture (REDCap) servers to gain unauthorised access to institutional networks.

The advisory said the attackers reportedly deployed a custom malware known as INFINITERED, which was designed to maintain long-term access to compromised systems and facilitate the theft of sensitive information.

According to the NCC-CSIRT, the campaign has targeted research organisations in North America, with affected systems including research databases, institutional email systems and academic and healthcare information systems.

The commission said Nigerian telecommunications infrastructure is not currently a direct target of the campaign but urged telecommunications service providers to remain vigilant and strengthen their cybersecurity measures.

The NCC-CSIRT also advised service providers to monitor for indicators associated with the campaign and ensure that vulnerable systems are properly updated and secured.