The National Information Technology Development Agency (NITDA) has been proactive in its mission towards providing a safer cyberspace for citizens.

Last week, the NITDA’s Computer Emergency Readiness and Response Team took another step ahead by issuing an alert to Nigerians about a new malware attack known as ‘Ov3r_Steale,’ which specifically targets Facebook users.

It was learned that the emerging threat tricks Facebook users into clicking on malicious links disguised as job advertisements; thus, it gets unauthorised access to people’s sensitive information and extracts their data for potential attacks.

The agency stated, “A new threat, known as “Ov3r_Stealer” malware, has emerged, targeting users on Facebook and spreading through deceptive job advertisements and fake accounts.

“Users become infected by clicking on these malicious advertisement links. The malware employs various execution methods to extract sensitive data from victims.”

According to a report in December 2023, an average of 411,000 malicious files were being sent every day last year, signifying a three percent increase from what was sent in 2022.

Meanwhile, social media platforms have become an important part of our daily lives, serving as avenues for communication, entertainment, and networking. However, with the increased credence of using digital platforms comes the heightened risk of cyber attacks, including the infamous tactic known as Ov3r_steale attacks.

These malware attacks represent a significant cybersecurity concern for Facebook users, as they target unsuspecting individuals with the intent of stealing their login credentials, geolocation, hardware information, passwords, credit card information, and some other sensitive information. These attacks can lead to myriad consequences, including identity theft, financial loss, and reputational damage.

Recently, some Facebook users have encountered an unsettling issue where unauthorised individuals post pornographic content on their accounts. To regain access, affected users are often required to pay a significant sum of money. Additionally, in some instances, these unauthorised users exploit the compromised accounts to solicit money from the owner’s friends.

Nevertheless, such occurrences typically require prior actions or vulnerabilities on the part of the user. Mostly by clicking malicious URLs.

One of the signs of ‘Ov3r_steale’ is its deceptive nature, often masquerading as legitimate communications or interaction within the Facebook platforms. Users may encounter suspicious messages, job advertisements, or notifications purporting to be from Facebook, prompting them to take action, such as verifying their credentials or clicking on links to purported job application websites.

Additionally, ‘Ov3r steale’ attacks manifest in the form of phishing attacks, where users are redirected to fraudulent URLs. This web address triggers the malware using a PowerShell script cleverly masked as a Windows Control Panel file. This ultimately results in the downloading of the malware payload from a GitHub repository.

However, on a positive note, it’s worth mentioning that ‘Ov3r steale’ attacks are entirely avoidable.

To enhance protection against these attacks, NITDA recommended that Nigerians constantly update their applications.

“Additionally, caution is advised for Facebook users, particularly when interacting with advertisement links on social media platforms,” it stated.

The agency further emphasised the importance of regularly updating antivirus software on users’ systems to stay vigilant against new and evolving threats in the cyber landscape.

Another effective measure of avoiding ‘Ov3r_Steale’ attacks is enabling two-factor authentication (2FA) on Facebook accounts. This additional layer of security requires users to provide a secondary form of verification, such as a code sent to their mobile device, in addition to their password when logging in. By implementing 2FA, users can significantly reduce the likelihood of unauthorised access to their accounts, even if their login credentials are compromised.

Furthermore, users should exercise caution when interacting with suspicious links or messages on Facebook. Avoid clicking on links from unknown sources or messages that prompt for sensitive information, as these may be indicative of phishing attempts associated with ‘Ov3r_Steale’ attacks.

Also, verifying the legitimacy of communication and scrutinising URLs before clicking on them can help mitigate the risk of falling victim to malicious links.

Additionally, most of these fraudulent URLs can be discovered by the misspelling of words or the use of letterlike symbols. For instance, consider URLs like Nigeria.com and Nigeriα.com, or Education.com and Educαtion.com. In the former, the spelling is correct, while in the latter, it’s incorrect, featuring letterlike symbols such as α in Nigeria and ℇ in education.

In addition to strengthening authentication measures, regularly monitoring account activity and settings on Facebook is also essential for detecting and mitigating potential security threats. Users should review their privacy settings, security preferences, and active sessions to ensure that no unauthorised access or suspicious activity has occurred.

Reporting any unusual or suspicious behaviour to Facebook’s support team can prompt swift action to investigate and address potential security breaches.
If you suspect that your Facebook account has been compromised by an ‘Over_steale’ attack, it’s crucial to take immediate action to regain control of the account.

Another effective measure is to promptly change your Facebook password. Additionally, conduct a comprehensive scan for malware or malicious software that could have enabled the attack. If the Facebook account is linked to an email, consider removing any unauthorised users through the email account.

However, it is important to note that the responsibility for safeguarding your digital safety lies with you. By taking proactive steps to mitigate the risks of cyberattacks and prioritising online security, one can enjoy a safer and more secure experience on Facebook and other online platforms.

Shuaib S. Agaka writes from the PRNigeria Centre, Kano.

The post On Measures to Suppress Malware Attacks on Social Media By Shuaib S. Agaka appeared first on Tech Digest News.

TECHDIGEST – The Honourable Minister of Communications and Digital Economy, Professor Isa Ali Ibrahim (Pantami), FCIIS, FBCS, FNCS, wishes to bring to the attention of the public the Ministry’s activities towards ensuring a safe and secure cyberspace for Nigerians before, during, and after the 2023 Presidential Elections.

As part of its mandate, the Federal Ministry of Communications and Digital Economy is expected to ensure adequate protection of Nigeria’s cyberspace to a level that citizens will have confidence in digital services. This mandate aligns with the goals and objectives of the National Digital Economy Policy and Strategy for a Digital Nigeria (NDEPS).

In line with this mandate and in our efforts at supporting the initiatives of securing the Nigerian cyberspace, the parastatals under the supervision of the Ministry have established Cybersecurity Centres, namely, the National Information Technology (NITDA)’s Computer Emergency Readiness and Response Team (CERRT), the Nigerian Communications Commission (NCC)’s Computer Security Incident Response Team (CSIRT), and Galaxy Backbone (GBB)’s Security Operations Centre (SOC). These Centres were established between 2020 and 2022 in line with the Honourable Minister’s policy directives and have been monitoring Nigerian cyberspace for potential threats and taking appropriate actions to mitigate them, both individually and collectively as well as in collaboration with other stakeholders.

It is worth noting that in the run-up to the 2023 General Elections, threat intelligence revealed an astronomical increase in cyber threats to Nigerian cyberspace. Generally, threats to public websites and portals averaged around 1,550,000 daily. However, this skyrocketed to 6,997,277 on Presidential Election Day.

READ ALSO: NCC approves harmonized short codes, directs implementation

The Honourable Minister of Communications and Digital Economy, as a Professor of Cybersecurity and one that is very passionate about ensuring a safe and secure cyberspace, directed all the parastatals to enhance their 24/7 monitoring of the networks and traffic for potential attacks from 24th February 2023 to 27th February 2023. Furthermore, on 24th February 2023, the Honourable Minister inaugurated the Ministerial Standing Committee on Advisory Role for the Protection of Nigerian Cyberspace and ICT Infrastructure. The Committee, chaired by the Board Chairman of NCC and with the CEOs of NCC, NITDA and GBB as members, was charged with the following responsibilities, among others:

1.     Monitoring of Telecommunication Infrastructure for the successful conduct of credible, free, fair, and transparent elections;

2.     Developing and implementing plans to enhance the resilience of critical digital infrastructure against cyber threats;

3.     Designing procedures and using technologies to prevent, detect, and respond to cyber-attacks, as well as developing the ability to recover from any damage that is done quickly;

4.     Developing a comprehensive risk assessment, analysing the nation’s current cybersecurity capabilities, and identifying gaps that need to be addressed; and

5.     Providing professional advice to the Government on the effective utilization of digital technologies in the conduct of the 2023 General Elections.

The Committee’s activity started on 24th February 2023 and ended on 28th February 2023. During this period, a series of hacking attempts were recorded, including Distributed Denial of Service (DDoS), email and IPS attacks, SSH Login Attempts, Brute force Injection attempts, Path Traversal, Detection Evasion, and Forceful Browsing. A total of 12,988,978 attacks were recorded, originating from both within and outside Nigeria. It is worth noting that the Centres successfully blocked these attacks and/or escalated them to the relevant institutions for appropriate action.

The parastatals, under the supervision of the Ministry of Communications and Digital Economy, have played a crucial role in providing the enabling environment for the successful conduct of a credible, free, fair, and transparent election. The Honourable Minister commends all stakeholders in the digital economy ecosystem for their support that resulted into this this unprecedented success.

More importantly, the Honourable Minister notes that these attainments are as a result of the commitment of the administration of President Muhammadu Buhari, GCFR towards ensuring Nigeria’s successful transition into the digital economy. The digital economy sector has enjoyed continued support of the President and it is highly appreciated. He also hopes that lessons learned during the process will be put to effective use in subsequent elections.

The post Pantami Assures Protection of Nigeria’s Cyberspace Before, During and After 2023 Presidential Elections appeared first on Tech Digest News.