NCC Warns Of New Virus Gaining Control Of Smartphones

NCC Warns Of New Virus Gaining Control Of Smartphones

 

The Nigerian Communications Commission (NCC) has issued a warning to telecom users and the general public about a new Android malware known as ‘AbstractEmu.’

 

iexclusive News Nigeria reports that the malware, according to the NCC, can gain access to cellphones, take entire control of affected handsets, and surreptitiously change device settings while attempting to avoid detection.

The Nigerian Computer Emergency Response Team (ngCERT), a national agency established by the Federal Government to manage the risks of cyber threats in Nigeria, recently announced this discovery. ngCERT also coordinates incident response and mitigation strategies to proactively prevent cyber-attacks against Nigeria.

 

“AbstractEmu has been discovered to be distributed through the Google Play Store and third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known markets like Aptoide and APKPure,” according to the research.

 

“A total of 19 Android apps posing as utility apps and system tools, such as password managers, money managers, app launchers, and data saving apps, have been found to contain the malware’s rooting functionality,” according to the advisory.

 

“The apps, which include All Passwords, Anti-ads Browser, Data Saver, Lite Launcher, My Phone, Night Light, and Phone Plus, among others, are alleged to have been widely disseminated via third-party shops.”

 

Rooting malware, according to the commission, is extremely dangerous since it leverages the rooting procedure to acquire privileged access to an Android operating system.

 

The attack chain, according to the NCC, is designed to use one of five exploits for older Android security issues to get root capabilities once loaded.

 

The malware will take over the device, install further malware, extract sensitive data, and send it to a distant attack-controlled server, according to the NCC.

 

The commission said, “Additionally, the malware can modify the phone settings to give app ability to reset the device password, or lock the device, through device admin; draw over other windows; install other packages; access accessibility services; ignore battery optimisation; monitor notifications; capture screenshots; record device screen; disable Google Play Protect; as well as modify permissions that grant access to contacts, call logs, Short Messaging Service (SMS), Geographic Positioning System (GPS), camera, and microphone.”

 

According to the NCC, ngCERT encourages users to be aware of installing unknown or strange apps and to be on the lookout for unusual behavior while using their phones. When there is a suspicion of strange behavior, customers should reset their phones to factory settings, according to the company.