TECHDIGEST – The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has recommended that users of the popular messaging app, WhatsApp, set up Two-Factor Authentication (2FA) to avoid falling victim to account takeover by hackers.

In an advisory issued on Tuesday, NCC-CSIRT noted that WhatsApp, which is a Meta-owned service, is increasingly becoming a prime target for hackers and scammers who are always looking for ways to gain unauthorized access to users’ accounts.

The CSIRT described two-factor authentication (2FA) as an identity and access management security method that requires two forms of identification to access resources and data. 

According to the advisory, “In the world of messaging apps, one of the most popular and recognizable is WhatsApp. WhatsApp is 100 per cent free to use, has a great mobile app, and supports audio and video calls. Whether you rely on WhatsApp for all your messaging needs or just use it from time to time, it is recommended to set it up with two-factor authentication (2FA). With this enabled, you will need to enter a custom PIN every time you log in to WhatsApp from a new device, adding an extra layer of security to your account.”  

The Team said, “2FA gives businesses or people the ability to monitor and help safeguard their most vulnerable information and networks. The 2FA is important because it prevents cybercriminals from stealing, destroying, or accessing your internal data records for their own use”. The advisory stated.

READ ALSO: NITDA Collaborates NESG on Digital Inclusion, Develops Regulatory Intelligence Framework 

The recommendation further states that, “WhatsApp provides two-factor authentication so you can further secure your account using a PIN. It is an optional feature that adds more security to your WhatsApp account, so it is recommended that everyone installs 2FA”.

The CSIRT stated ten steps for enabling 2FA on WhatsApp, which include the following steps:

Open WhatsApp, Tap Settings, Tap Account, Tap Two-Step Verification, Tap Enable, Enter the Six-Digit PIN you wish to use, Tap Next, then enter it a second time to confirm it, Tap Next, Add an email address for extra security (this step is optional but it is an extra way to retrieve your account if you forget your Pin) and then Tap Next.  

For those concerned that their PIN might have been compromised or is easy to guess, they can change their WhatsApp PIN or email address by tapping settings.

Two-Step Verification, tapping Change PIN or Change Email Address, Entering a new PIN or email address, and then tapping ‘next’ to effect the necessary changes.

The CSIRT is the telecom sector’s cyber security incidence center set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

The post NCC Recommends Two-Factor Authentication to Secure WhatsApp appeared first on Tech Digest News.

TECHDIGEST – The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT), in line with its mandate, has rolled out some advisories in the first few weeks of the year 2023 as cyber threat actors continue to devise means of compromising their targets.

The latest of such advisories urged users to be mindful after attackers use Microsoft OneNote attachments in phishing emails that infect victims with remote access malware, which may allow hackers to remotely access vital information on victims’ devices.

The Team advised users not open files from people they do not know, not to click ‘OK’ and immediately exit the application if they receive a warning that opening an attachment or link can damage their computer or files and to promptly share an unknown email they believe to be genuine with a security or Windows administrator to assist in determining whether the file is secure.

It had recently advised people not to open attachments in suspicious emails and to only purchase or download applications from official websites in response to the discovery of phishing malware that can gain unauthorized access to sensitive user data and download further malware.

READ ALSO: NITDA Commends Ilorin Innovation Hub

The team reported that cybersecurity analysts at ASEC (South Korea’s cybersecurity emergency response centre), discovered a NetSupport RAT malware being distributed by threat actors from a phishing website disguised as a popular Pokemon card game.

The malware is a remote access tool that easily controls its victims’ Personal Computers and may allow the attackers to remotely control the compromised computer’s mouse and keyboard, access the system’s file management and history and even execute commands allowing them to install additional malware.

According to the researcher, the CRAFTED website that spread the malware is still online. It claims to be home to a new NFT card game built around the Pokemon franchise, offering users strategic fun together with NFT investment profits.

In a related advisory, following the discovery of several phishing apps on the Google Play Store, NCC-CSIRT had also advised users not to give out sensitive information through untrusted platforms.

NCC-CSIRT’s advisory on the discovery said the apps, which have been downloaded 450, 000 times in total, can be games or investment services, but that they are designed to steal sensitive user information.

While some of the malicious apps have been removed, others are still active on the store, with the affected apps listed as Golden Hunt, Reflector, Seven Golden Wolf Blackjack, Unlimited Score, Big Decisions, Jewel Sea, Lux Fruits Game, Lucky Clover, King Blitz, and Lucky Hammer.

According to the advisory, after installing and opening the app, it will contact a remote server which will reply with instructions on what to do. These instructions typically include phishing pages that will be displayed to unsuspecting users to collect their sensitive information.

Meanwhile, NCC-CSIRT also advised users to update their Galaxy App Store following the discovery of multiple vulnerabilities in the Samsung Galaxy App Store Application can lead to unwanted app installations and code execution. It disclosed that Ken Gannon, a cybersecurity researcher from NCC Group, discovered the vulnerabilities in the Galaxy App Store application on Samsung devices that are running Android 12 and older.

The CSIRT is the telecom sector’s cyber security incidence center set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

The post NCC-CSIRT Issues Advisories To Protect Nigerians Against Threat Actors appeared first on Tech Digest News.

TECHDIGEST – Malware that steals Facebook account credentials, known as “Schoolyard Bully”, has infected over 300,000 android devices, prompting the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) to issue an advisory reminding user to only download applications from official sites and application stores.

The NCC-CSIRT advisory in this regard further recommended that users double-check each application and uncheck boxes that request extra third-party downloads when installing apps downloaded from the Google Play Store and to use anti-malware applications to routinely scan their devices for malware.

READ ALSO: NCC Takes Regulatory Steps to Eliminate Risks in Telecom Sector

Researchers from mobile security firm, Zimperium, found several apps that transmit the “Schoolyard Bully” malware while disguising themselves as reading and educational apps with a variety of books and topics for their victims to study.

The malicious apps were available on Google Play, yet they have already been taken down. However, they still spread via third-party Android app shops.

The primary objective of the malware, which affects all versions of Facebook Apps for Android, is to steal Facebook account information, including the email address and password, account ID, username, device name, device RAM (Random Access Memory), and device API (Application Programming Interface).

According to NCC-CSIRT, “The (Zimperium) research stated that the malware employs JavaScript injection to steal the Facebook login information. The malware loads a legitimate URL (web address) inside a WebView (a WebView maps website elements that enables user interaction through Android View objects and their extensions) with malicious JavaScript injected to obtain the user’s contact information (phone number, email address, and password), then send it to the command-and-control server.

Furthermore, malware uses native libraries to evade detection and analysis by security software and machine learning technologies.”

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with Nigerian Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

The post NCC-CSIRT warns users to download apps from official sites, stores appeared first on Tech Digest News.

TECHDIGEST – The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned about the potential harm of taking part in the Invisible Challenge on the short-form video hosting service, TikTok.

The NCC-CSIRT advisory said threat actors took advantage of the viral Invisible Challenge to disseminate an information-stealing malware known as the WASP (or W4SP) stealer. 

The WASP stealer, which is high in probability with critical damage potential, is a persistent malware hosted on discord that its developer claim is undetectable. 

How it operates

The NCC-CSIRT explained that the Invisible Challenge involves wrapping a somewhat transparent body contouring filter around a presumed naked individual. 

READ ALSO: Osinbajo Unveils African’s First Humanoid Robot 

Attackers are uploading videos to TikTok with a link to software that they claim can reverse the filter’s effects. 

“Those who click on the link and attempt to download the software, known as “unfilter,” are infected with the WASP stealer.

Suspended accounts had amassed over a million views after initially posting the videos with a link. Following the link leads to the “Space Unfilter” Discord server, which had 32,000 members at its peak but has since been removed by its creators. 

“Successful installation will allow the malware to harvest keystrokes, screenshots, network activity, and other information from devices where it is installed. It may also covertly monitor user behaviour and harvest Personally Identifiable Information (PII), including names and passwords, keystrokes from emails, chat programs, websites visited, and financial activity. 

This malware may be capable of covertly collecting screenshots, video recordings, or the ability to activate any connected camera or microphone,” the regulator explained. 

Preventive measures

 The Team said some of the ways to forestall such an attack include avoiding clicking on suspicious links, using anti-malware software on your devices, checking your app tray and removing any apps that you do not remember installing or that are dormant, and embracing healthy password hygiene practices such as using a password manager. 

Source: Nairametric 

The post TikTok Challenge Exposes Participants To Data Theft, NCC Warns appeared first on Tech Digest News.