Connect with us

Communication

NCC CSIRT Discovers ‘Xenomorph’ – Malicious Software That Steal Banking, Other Details On Android Devices

Published

on

NCC Logo
Share

By Ossom Raphael

The Nigerian Communications Commission (NCC) has advised telecom consumers and other Internet users, particularly those using Android-powered devices to use trusted Antivirus solutions and update them regularly to their latest definitions.

This advice comes as the NCC’s Computer Security Incident Response Team (CSIRT) discovered a newly-hatched malicious software that steals users’ banking app login credentials on Android devices.

According to a security advisory from the NCC CSIRT, the malicious software called “Xenomorph”, found to target 56 financial institutions from Europe, has high impact and high vulnerability rate. The main intent of this malware is to steal credentials, combined with the use of SMS and Notification interception to log-in and use potential 2-factor authentication tokens.

A statement by Ikechukwu Adinde, Director, Public Affairs of the NCC said Xenomorph is propagated by an application that was slipped into Google Play store and masquerading as a legitimate application called “Fast Cleaner” ostensibly meant to clear junk, increase device speed and optimize battery. In reality, this app is only a means by which the Xenomorph Trojan could be propagated easily and efficiently.

To avoid early detection or being denied access to the PlayStore, “Fast Cleaner” was disseminated before the malware was placed on the remote server, making it hard for Google to determine that such an app is being used for malicious actions.

Once up and running on a victim’s device, Xenomorph can harvest device information and Short Messaging Service (SMS), intercept notifications and new SMS messages, perform overlay attacks, and prevent users from uninstalling it. The threat also asks for Accessibility Services privileges, which allow it to grant itself further permissions.

The statement further said the malware also steals victims’ banking credentials by overlaying fake login pages on top of legitimate ones. Considering that it can also intercept messages and notifications, it allows its operators to bypass SMS-based two-factor authentication and log into the victims’ accounts without alerting them.

“Xenomorph has been found to target 56 internet banking apps, 28 from Spain, 12 from Italy, 9 from Belgium, and 7 from Portugal, as well as Cryptocurrency wallets and general-purpose applications like emailing services. The Fast Cleaner app has now been removed from the Play Store but not before it garnered 50,000+ downloads,” the CSIRT security advisory asserted.

The Commission also implore consumers and other stakeholders to always update banking applications to their most recent versions.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Communication

Telecommunications workers threaten 3-day warning strike

Published

on

Telecommunications Mast
Telecommunications Mast
Share

The Private Telecommunications and Communications Senior Staff Association of Nigeria (PTECSSAN) has issued a three-day warning strike notice to Huawei Technologies Company Limited over alleged anti-labour practices.

Huawei is a global provider of information and communications technology (ICT) infrastructure and smart devices.

The PTECSSAN General Secretary, Okonu Abdullahi, in a letter addressed to the company, said the union has directed the withdrawal of services of its members from projects of the company effective between 12.00 a.m. May 2 and 11.59 p.m. May 4, 2023.

Abdullahi, in the letter made available to newsmen on Sunday, April 30, said the failure of the company to comply with the union’s demands after the warning strike would result in an indefinite strike.

He noted that the strike might cause telecommunications network disruptions as no worker would be available to attend to them.

The PTECSSAN official said: “We were constrained to embark on this industrial action when it became apparent to us that your company is not labour friendly and is not interested in peaceful and amicable resolutions of the concerns of our members.

“For the avoidance of doubt, we shall not be backing down on the warning strike except the following are agreed with the union.

“Immediate recognition of the fundamental right of the employees to freely associate with the union; immediate recognition of the union as negotiating body for the employees on workers welfare.

“Immediate remittance of membership dues into the union’s account as earlier provided; immediate payment of March salaries of some members of the union, among others.

“As we look forward to your company’s granting of our demands, please be assured of our union’s resolve to ensure better working conditions for her members.”

Other demands of the Telecommunications workers include the immediate regularisation of the employment of union members on the Huawei projects and the involvement of the union in the process.

Others are the immediate commencement of appropriate pensions deduction and remittance of same as required by the Pension Act.

“Immediate approval of the National Health Insurance Scheme that covers the employees, their spouses and four of their dependents.

“Immediate enrollment of Union members in the Group Life Insurance as stipulated in the Pension Reform Act 2004, Section 9(3).

“Immediate commencement of negotiation of the Collective Bargaining Agreement (Conditions of Service) for the benefit of union members,” Abdullahi added.

Meanwhile, Huawei has yet to react to the latest development as of the time of filing this report.

 

Continue Reading

Communication

Nigeria’s telephone users hit 222.6m

Published

on

Mobile Telephone Sets
Mobile Telephone Sets
Share

The National Bureau of Statistics (NBS) has declared that the number of telephone users in Nigeria increased to 222.6 million at the end of 2022.

The 2022 figure showed an increase of 27.1 million telephone users over the 195.5 million subscribers recorded at the end of 2021.

The NBS made the disclosure via its Telecoms Data: Active Voice and Internet per State, Porting and Tariff Information report for the last quarter of 2022, released on Monday, April 24.

The NBS stated that the figure for the last quarter of 2022 represented a 13.87 per cent rise in voice subscriptions on a year-on-year basis.

On a quarter-on-quarter basis, the report showed growth stood at 4.89 per cent.

The NBS also recorded a total of 154.9 million active internet subscribers at the end of 2022 compared to 142 million recoded at the end of 2021.

“This represents a 9.07 per cent increase in active internet subscriptions year-on-year, while on a quarter-on-quarter basis, internet subscription grew by 1.35 per cent,” it stated.

On state-by-state analysis, the report showed that Lagos State had the highest number of active telephone users in 2022 at 26.5 million, followed by Ogun State with 13 million users.

Kano State came third with 12.4 million telephone users.

The report showed that Bayelsa State had the least number of telephone users at 1.6 million subscribers, followed by Ebonyi and Ekiti states with 1.9 million users and two million users, respectively.

It also showed that Lagos State had the highest number of internet users at 18.7 million subscribers, followed by Ogun State with 9.2 million subscribers and Kano State with 8.5 million subscribers.

“On the other hand, Bayelsa recorded the least number of 1.1 million internet users, followed by Ebonyi and Ekiti with 1.3 million and 1.5 million subscribers, respectively,” the NBS added.

The NBS noted that majority of telephone users in Nigeria in 2022 were MTN subscribers.

 

Continue Reading

Business & Economy

NCC, FIRS inaugurate 17-man joint committee to enhance revenues in telecoms sector

Published

on

NCC Headquarters, Abuja
Share

The Nigerian Communications Commission (NCC) and the Federal Inland Revenue Service (FIRS) have taken their collaboration a bit further by setting up a Joint Committee of senior and management staff of the two agencies towards the implementation of inter-agency strategies for enhancing national revenues in the telecommunications sector.

The collaboration birthed the inauguration of 17-member committee by the NCC’s Executive Commissioner, Stakeholder Management, Adeleke Adewolu, on behalf of the Commission’s Executive Vice Chairman, Prof. Umar Danbatta, and the Executive Chairman of the FIRS, Mr. Muhammad Nami, at the NCC’s headquarters in Abuja.

The inauguration of the committee, comprising six officials of NCC and eleven officials of FIRS, was carried out with senior officials of NCC and those of the tax agency led by its Coordinating Director for Compliance Support Group, Dr. Dick Irri, who represented the FIRS’ Executive Chairman, Muhammad Nami at the event.

While inaugurating the Committee on behalf of the heads of the two agencies, Adewolu said the terms of reference of the Committee include: review the Memorandum of Understanding (MoU) signed between the NCC and the FIRS on June 9, 2020; and carry out inter-agency interaction on the implementation of the NCC’s Revenue Assurance System (RAS), to ensure that it incorporates the needs of FIRS to the extent that RAS can remain the sole interface with telecom service providers’ networks vis-à-vis the Tax Authority’s information needs from the telecoms sector.

On his part, Dr. Dick Irri, who led the FIRS delegation, advised the Committee to take the assignments very seriously.
Irri said: “I would like to task you to take this assignment as a national matter as we expect the two agencies to work in harmony, collaborate effectively and have a warm handshake that will make this synergy between the two agencies a great example of collaboration between Federal Government agencies towards enhancing fiscal governance in Nigeria”.

Continue Reading