Connect with us

Tech

NCC alerts Nigerians to new Android malware, AbstractEmu

Published

on

NCC alerts Nigerians to new Android malware, AbstractEmu
The Nigerian Communications Commission (NCC) has alerted telecom consumers and the general public that a new Android malware called  AbstractEmu.
The commission in a statement on Monday said the malware can gain access to smartphones, take complete control of infected smartphones and silently modify device settings while simultaneously taking steps to evade detection.
This discovery was announced recently by the Nigerian Computer Emergency Response Team (ngCERT), which coordinates incident response and mitigation strategies to proactively prevent cyber-attacks against Nigeria
It said AbstractEmu has been found to be distributed via Google Play Store and third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known marketplaces like Aptoide and APKPure.
The advisory stated that a total of 19 Android applications that posed as utility apps and system tools like password managers, money managers, app launchers, and data saving apps have been reported to contain the rooting functionality of the malware.
The apps are said to have been prominently distributed via third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known marketplaces like Aptoide and APKPure.
The apps include All Passwords, Anti-ads Browser, Data Saver, Lite Launcher, My Phone, Night Light and Phone Plus, among others.
According to the report, rooting malware although rare, is very dangerous. By using the rooting process to gain privileged access to the Android operating system, the threat actor can silently grant itself dangerous permissions or install additional malware – steps that would normally require user interaction. Elevated privileges also give the malware access to other apps’ sensitive data, something not possible under normal circumstances.
The ngCERT advisory also captured the consequences of making their devices susceptible to AbstractEmu attack. Once installed, the attack chain is designed to leverage one of five exploits for older Android security flaws that would allow it to gain root permissions. It also takes over the device, installs additional malware, extracts sensitive data,  and transmits to a remote attack-controlled server.
Additionally, the malware can modify the phone settings to give app ability to reset the device password, or lock the device, through device admin; draw over other windows; install other packages; access accessibility services; ignore battery optimisation; monitor notifications; capture screenshots; record device screen; disable Google Play Protect; as well as modify permissions that grant access to contacts, call logs, Short Messaging Service (SMS), Geographic Positioning System (GPS), camera, and microphone.
The ngCERT also asserts in the advisory that, while the malicious apps were removed from Google Play Store, the other app stores are likely distributing them.
Consequently, the NCC wishes to reiterate a two-fold ngCERT advisory in order to mitigate the risks. The two-fold advisory include:
1.     Users should be wary of installing unknown or unusual apps, and look out for different behaviour as they use their phones.
2.     Reset your phone to factory settings when there is suspicion of unusual behaviour in your phone.
The NCC, in exercise of its mandate and obligation to the consumers, will continue to sensitise and educate telecoms consumers on any cyber threat capable of inflicting low or high-impact harms on their devices, whether discovered through the ngCERT or the telecom sector’s Centre for Computer Security Incident Response managed by the Commission.
It will be recalled that the NCC, in October 2021, alerted telecom consumers of the existence of new, high-risk and extremely-damaging, Android device-targeting Malware called Flubot and outlined steps to prevent the eir devices from being attacked by the virus.

Add your voice

0 comments

People reading currently

Gates Foundation, UAE deploy $200 million for climate action, food systems innovation Gates Foundation, UAE deploy $200 million for climate action, food systems innovation
Agriculture3 months ago

Gates Foundation, UAE to deploy $200 million for climate action, food systems innovation

The fund will help smallholder farmers in sub-Saharan Africa and South Asia build resilience and adaptation to climate change. The...

Climate Finance Climate Finance
Dev. Finance3 months ago

Kenya, Nigeria named as targeted countries for climate-blended finance deals

Nigeria and Kenya have been identified as the most frequently targeted countries for climate-blended finance flows in the past three...

FuturizeU supports development of innovative healthcare products in Africa FuturizeU supports development of innovative healthcare products in Africa
Social Entreprenuership6 months ago

FuturizeU supports development of innovative healthcare products in Africa

Futurize and AstraZeneca are investing in social entrepreneurs who are developing innovative products that are addressing healthcare equity and early...

Banjul International Airport in Gambia Banjul International Airport in Gambia
Dev. Finance6 months ago

Saudi Fund for Development advocates Climate Change Mitigation, Social Infrastructure Investments in Africa

  The Saudi Fund for Development (SFD) has advocated for the preservation of heritage projects in Africa through initiatives such...

Catalyst Fund Team Catalyst Fund Team
Climate & Environment6 months ago

Catalyst Fund Raises First Round of $40 million investment in African Climate Startups

The Catalyst Fund has achieved the initial close of its $40 million fund for investing in climate startups in Africa....

Paystack CEO, Shola Akinlade, buys majority stake in Aarhus Fremad Paystack CEO, Shola Akinlade, buys majority stake in Aarhus Fremad
Sports11 months ago

Paystack CEO, Shola Akinlade, buys majority stake in Aarhus Fremad

A Danish football club, Aarhus Fremad announced on Tuesday that it has sold  55 percent of its shares to the...

MRI is increasing survival rate of women with breast cancer- PPC MRI is increasing survival rate of women with breast cancer- PPC
Climate & Environment11 months ago

MRI is increasing survival rate of women with breast cancer- PPC

PPC Limited, Nigeria’s leading engineering and infrastructure development company with footprints across Nigeria’s healthcare landscape, says that the advancement of...

Adeleke versus Oyetola Adeleke versus Oyetola
Policy & Regulation11 months ago

Appeal court upholds Senator Ademola Adeleke’s win in Osun

The Court of Appeal Abuja has overturned the ruling of the Osun State Governorship tribunal and has declared Senator Ademola Adeleke...

Lawmaker demands revamp of bank e-payment platforms Lawmaker demands revamp of bank e-payment platforms
Dev. Finance11 months ago

Lawmaker demands revamp of bank e-payment platforms

The members of the House of Representatives have demanded that the Central Bank of Nigeria (CBN) direct banks to revamp...

CBN to destroy naira notes worth N6tn CBN to destroy naira notes worth N6tn
Economy11 months ago

We’ve disbursed N20bn to alleviate cash crunch, CBN tells NLC

The Central Bank of Nigeria (CBN) met with the leadership of the Nigeria Labour Congress (NLC) in Abuja on Thursday,...

Ad Blocker Detected!

Advertisements fund this website. Please disable your adblocking software or whitelist our website.
Thank You!

you're currently offline