Telecom
NCC Raises Alarm over ‘AbstractEmu’, New Malware Attacking Android Devices
Nigerian Communications Commission (NCC) has warned subscriners to beware of ‘AbstractEmu’, a malware which can gain access to smartphones, take complete control of infected smartphones and silently modify device settings while simultaneously taking steps to evade detection.
Dr. Ikechukwu Adinde, director, Public Affairs, NCC, in a statement, said that the discovery was announced recently by the Nigerian Computer Emergency Response Team (ngCERT), the national agency established by the Federal Government to manage the risks of cyber threats in the Nigeria.
ngCERT also coordinates incident response and mitigation strategies to proactively prevent cyber-attacks against Nigeria
AbstractEmu has been found to be distributed via Google Play Store and third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known marketplaces like Aptoide and APKPure.
The advisory stated that a total of 19 Android applications that posed as utility apps and system tools like password managers, money managers, app launchers, and data saving apps have been reported to contain the rooting functionality of the malware.
The apps are said to have been prominently distributed via third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known marketplaces like Aptoide and APKPure.
The apps include All Passwords, Anti-ads Browser, Data Saver, Lite Launcher, My Phone, Night Light and Phone Plus, among others.
According to the report, rooting malware although rare, is very dangerous. By using the rooting process to gain privileged access to the Android operating system, the threat actor can silently grant itself dangerous permissions or install additional malware – steps that would normally require user interaction. Elevated privileges also give the malware access to other apps’ sensitive data, something not possible under normal circumstances.
The ngCERT advisory also captured the consequences of making their devices susceptible to AbstractEmu attack. Once installed, the attack chain is designed to leverage one of five exploits for older Android security flaws that would allow it to gain root permissions. It also takes over the device, installs additional malware, extracts sensitive data, and transmits to a remote attack-controlled server.
Additionally, the malware can modify the phone settings to give app ability to reset the device password, or lock the device, through device admin; draw over other windows; install other packages; access accessibility services; ignore battery optimisation; monitor notifications; capture screenshots; record device screen; disable Google Play Protect; as well as modify permissions that grant access to contacts, call logs, Short Messaging Service (SMS), Geographic Positioning System (GPS), camera, and microphone.
The ngCERT also asserts in the advisory that, while the malicious apps were removed from Google Play Store, the other app stores are likely distributing them. Consequently, the NCC wishes to reiterate a two-fold ngCERT advisory in order to mitigate the risks. The two-fold advisory include:
- Users should be wary of installing unknown or unusual apps, and look out for different behaviours as they use their phones.
- Reset your phone to factory settings when there is suspicion of unusual behaviours in your phone.
The NCC, in exercise of its mandate and obligation to the consumers, will continue to sensitise and educate telecoms consumers on any cyber threat capable of inflicting low or high-impact harms on their devices, whether discovered through the ngCERT or the telecom sector’s Centre for Computer Security Incident Response managed by the Commission.
It will be recalled that the NCC, in October 2021, alerted telecom consumers of the existence of new, high-risk and extremely-damaging, Android device-targeting Malware called Flubot and outlined steps to prevent the eir devices from being attacked by the virus.
Nigerian Communications Commission (NCC) has charged the over 174 million telecoms subscribers in the country to constantly monitor their data usage to authenticate their consumption level.
This follows concerns being raised by telecoms consumers about the rapidity of data depletion on their devices.
The Commission particularly enjoined the consumers to always contact their service providers to make requests for cases of discrepancies noted in their data usage.
While the consumers are expected to contact their service providers to request for their usage history/statement where inconsistency exists in their data usage as first step, the Commission said they may also escalate such issues to the Commission through its toll-free Number 622 and social media platforms, especially if their requests are not satisfactorily handled.
The Commission, which also made some clarifications regarding the concerns being raised by the consumers around data usage, said the need to inform the consumers on their concerns is part of its commitment to protect and appropriately inform and educate the telecom consumer on industry issues.
Making further clarifications around data speed and usage, the Commission said data speed is the speed at which data is transferred between two devices, measured in megabits per second (Mbps or mbps), stressing that given the spread of Internet services and the immense investment in the sector, data rates have continued to increase and users may be unaware of how to measure data speed.
The telecoms regulator explained further that websites such as www.fast.com also provide an easy way for consumers to measure Internet speed on any device at any location.
“The higher the data speed, the quicker pages load-downloads and uploads-occur and expectedly, the quicker data bundles are exhausted. So, as telecom consumers are able to do more on devices in less time, some consumers’ devices & network service providers make it possible to limit data speed to help users manage data usage better.
“In any case, most devices now include functions to measure data used by devices and it is imperative that users monitor same to authenticate data usage, such as applications left running on devices. Therefore, where discrepancies occur users may contact their service provider to request for their usage history/statement. If request is not dealt with satisfactorily then, users can contact NCC by calling 622 or engage the Commission via its social media platforms”.
It added that the data usage experience is a function of location, network equipment and users connected in a particular location.
Association of Mobile Communication Device Technicians of Nigeria (AMCODET), has called on the Nigerian Communications Commission (NCC) to make it mandatory for mobile phones to be registered at the point of purchase.
According to Kehinde Apara, president of AMCODET, implementing this registration process would significantly help in combating phone theft and assist in locating stolen devices.
Apara, made this appeal in an interview in Lagos on Monday.
He stated, “Registration of mobile phones will reduce theft to the barest minimum, as it will be difficult for thieves to sell registered stolen phones.”
Apara explained that the registration of new phones would also help to reduce the harassment faced by technicians by security agencies.
“So many of our members have been labelled accomplices in theft cases, because customers bring stolen phones to them to repair. We believe this is unfair to such innocent people,” he said.
He went on to highlight that the NIN-SIM linkage, which was originally an idea brought forward by AMCODET, was created to curb insecurity and theft.
However, Apara pointed out that “It is not enough.”
He stressed the need for further measures to ensure the proper registration of mobile phones, emphasising that such a step would make it easier for technicians to identify stolen devices brought in for repair or flashing.
“AMCODET has been at the forefront of organising seminars on the security of mobile phones and has also been sensitising the public and authorities on the challenges faced by the association due to phone theft. There is no way our members can identify if a phone is stolen when brought to them for repairs or flashing, but if the phone is registered, the technician can more easily identify it,” he explained.
Apara also expressed a desire for closer collaboration with security agencies, saying, “We want to work with security agencies to ensure that phones are properly registered, theft is prevented, and thieves are brought to book.”
In additin to the call for phone registration, Apara appealed to individuals and the private sector to support efforts to develop the mobile phone industry in Nigeria.
He remarked, “We need individuals’ support to develop our industry, rather than relying on government for everything.”
He emphasised that Nigeria has the capacity to develop its own technology and reduce reliance on imported devices, “With the support of individuals and the private sector, Nigerians can begin to develop its own technology, rather than relying on imported technology.”
Apara expressed optimism for the future of the mobile phone industry in Nigeria, believing that with the right support, the country could build its own technological solutions and move towards greater self-reliance.
“We can develop our own technology.”
“But we need the support of individuals and organisations to make it happen,” he said.
Credit: NAN
French antitrust regulators have fined Apple 150 million euros ($162 million) over its App Tracking Transparency (ATT) feature, which is facing scrutiny in multiple European countries.
The French Competition Authority ruled that Apple’s implementation of ATT was “neither necessary nor proportionate to the company’s stated goal to protect user data” and unfairly penalized third-party publishers.
Alongside the financial penalty, Apple has been ordered to publish the decision on its website for seven days. The ruling comes amid ongoing investigations in Germany, Italy, Romania, and Poland into ATT, which Apple introduced in 2021 as a privacy safeguard.
ATT requires apps to obtain explicit user consent via a pop-up before tracking activity across other apps and websites. If users decline, the app loses access to their advertising identifier, limiting targeted advertising. Critics argue that the system disproportionately benefits Apple by restricting competitors while promoting its own advertising services.
The French watchdog found that ATT forces users to navigate excessive consent windows for third-party apps on iPhones and iPads, making the process unnecessarily complicated.
Additionally, Apple’s system requires users to opt out of ad tracking twice rather than once, which the authority said undermines the feature’s neutrality and causes economic harm to app publishers and ad service providers.
The ruling emphasized that smaller publishers, which rely heavily on third-party data collection for revenue, are particularly affected.
The French regulator initially declined to impose emergency measures in 2021 after complaints from the advertising industry, but continued its investigation, ultimately leading to Monday’s decision.
DStv Revenue Plunges as MultiChoice Loses Nearly 4m Subscribers
NCC Asks Consumers to Monitor Data Usage to Authenticate Consumption
TikTok Sale Deal Expected Before April 5 Deadline – Trump
Phone Theft: AMCODET Urges Mandatory Registration @ Point of Purchase
Questions Over House of Reps Threat to Arrest NIMC DG
Telecom2 days agoMTN, Lynk Global Make Africa’s First Satellite-to-Mobile Call
E-Financial2 days agoNigeria Gets Fresh $500m World Bank Loan for Economic Stimulus Programme
E-Business2 days agoSystemSpecs’s Subsidiary Deelaa Becomes Whatadeal
General News2 days agoSERAP Asks National Assembly to Drop Bill to Jail Nigerians who Fail to Vote
E-Financial2 days agoUninsured Depositors of Heritage Bank to Receive Liquidation Dividends In April – NDIC
Telecom2 days agoSmart Treasure Investment Team’s Initiatives Eradicate Poverty, Says Aminu
E-Business2 days agoCybersecurity Firm Says It’s Time to Back it Up, As the World Marks World Backup Day
Telecom2 days ago15-Year-Old Autistic Artist, Kanye, to Unveil World’s Largest Art Canvas on Autism Awareness Day