TECHDIGEST – A new report by Kaspersky has shown that 61percent of Nigerian face phishing scams when leveraging digital platforms for payment purposes, especially online banking or mobile wallet services.

The breakdown indicates that 67percent have personally encountered fake websites, and a staggering 82percent experienced scams (via texts or calls) using social engineering.

According to the report, many Nigerians are aware of threats of digital payment methods, with the majority of respondents from Nigeria reporting that they are aware of both financial phishing attacks (95percent) and online scams (97percent). 78percent also stated that they are informed about banking malware on PCs and on mobile.

READ ALSO: Senate Passes Nigeria Start-up Bill

Commenting, Bethwel Opil, Enterprise Sales Manager at Kaspersky in Africa, said: “Whether we talk about the proliferation of phishing scams or mobile malware, it is important to establish some basic cybersecurity standards.

“Advanced security solutions, which are able to filter out most of the generic attack vectors, supplemented with other preventive measures such as good cybersecurity awareness and regular password changes, can help to keep your financial transactions secure.”

However, 98percent think that banks and payment companies should educate users more about the threats online. When it comes to a list of security features that consumers would like to see more on existing banking apps and mobile wallets, according to the survey results, here’s what matters most to them:

The implementation of one-time-passwords (OTPs) via SMS for every transaction (76percent)

Biometric security features like facial or fingerprint recognition (75percent)

Requiring two-factor authentication (64percent)

Automated detection and intervention for fraudulent transactions (39percent)

Point-to-point encryption (22percent)

Source: ITpulse

The post Over 60% of Nigerian face phishing scams when using digital payments appeared first on Tech Digest News.

TECHDIGEST – Researchers at Microsoft have warned Android users of malware called ‘toll fraud’ that disguises as normal apps on the Google Play Store and drains the wallet of users once installed. Microsoft describes toll fraud malware as a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent.

READ ALSO: Trashpays:Transforming Waste into Economic Resource

This type of malware is said to be one of the most prevalent types of Android malware – and it continues to evolve.

Compared to other subcategories of billing fraud, which include SMS fraud and call fraud, toll fraud has unique behaviours. Whereas SMS fraud or call fraud uses a simple attack flow to send messages or calls to a premium number, toll fraud has a complex multi-step attack flow that malware developers continue to improve.

Explaining how the malware operates, the researchers in a Microsoft blog post-https://www.microsoft.com/security/blog/2022/06/30/toll-fraud-malware-how-an-android-application-can-drain-your-wallet/, said,

”We saw new capabilities related to how this threat targets users of specific network operators. It performs its routines only if the device is subscribed to any of its target network operators. It also, by default, uses cellular connection for its activities and forces devices to connect to the mobile network even if a Wi-Fi connection is available.”

“Once the connection to a target network is confirmed, it stealthily initiates a fraudulent subscription and confirms it without the user’s consent, in some cases even intercepting the one-time password (OTP) to do so. It then suppresses SMS notifications related to the subscription to prevent the user from becoming aware of the fraudulent transaction and unsubscribing from the service,” they added.

How it gets to your phone

This type of attack starts when a user downloads an app the malware is disguised as in the Google Play Store.
These trojan apps will usually be listed in popular categories in the app store such as personalization (wallpaper and lock screen apps), beauty, editor, communication (messaging and chat apps), photography, and tools (like cleaner and fake antivirus apps).

The researchers say that these apps will ask for permissions that don’t make sense for what is being done (i.e. a camera or wallpaper app asking for SMS or notification listening privileges).

Protecting yourself against the malware

Microsoft in the security alert notes that toll fraud is one of the most common malware categories with high financial loss as its main impact. Due to its sophisticated cloaking techniques, prevention from the side of the user plays a key role in keeping the device secure.

According to the researchers, a rule of thumb is to avoid installing Android applications from untrusted sources (sideloading) and always follow up with device updates. They also recommend end-users take the following steps to protect themselves from toll fraud malware:

Install applications only from the Google Play Store or other trusted sources.

Avoid granting SMS permissions, notification listener access, or accessibility access to any applications without a strong understanding of why the application needs it. These are powerful permissions that are not commonly needed.

Use a solution such as Microsoft Defender for Endpoint on Android to detect malicious applications.

If a device is no longer receiving updates, strongly consider replacing it with a new device.

Source: Nairametric

The post Microsoft Raises Alarm Over New Android Malware, ‘Toll Fraud’ appeared first on Tech Digest News.