NCC Raises Alarm, Says TikTok Challenge Circulates Info-Stealing Malware

• The Nigerian Communications Commission’s (NCC) Computer Security Incident Response Team has warned Nigerians over Tik Tok challenge
• The warning was contained in an advisory on Tuesday by NCC Director of Public Affairs, Reuben Muoka
• He says a viral TikTok challenge, known as the Invisible Challenge, is used to disseminate an information-stealing malware known as the WASP (or W4SP) stealer

The Nigerian Communications Commission’s (NCC) Computer Security Incident Response Team has warned Nigerians that the viral challenge exposes devices to Information-Stealing Malware.

According to the NCC in a statement, taking part in the ‘Invisible Challenge’ on short-form video hosting service, TikTok, is dangerous.

The warning was contained in an advisory on Tuesday by NCC Director of Public Affairs, Reuben Muoka.

Read also

D'banj's arrest: Osinbajo managed N-Power efficiently, social media users react

He said threat actors had taken advantage of a viral TikTok challenge, known as the Invisible Challenge, to disseminate an information-stealing malware known as the WASP (or W4SP) stealer.

He said:

“The Invisible Challenge involves wrapping a somewhat transparent body contouring filter around a presumed naked individual. Attackers are uploading videos to TikTok with a link to software that they claim can reverse the filter’s effects,” the advisory read in part.

“Those who click on the link and attempt to download the software, known as “unfilter,” are infected with the WASP stealer. Suspended accounts had amassed over a million views after initially posting the videos with a link. Following, the link leads to the “Space Unfilter” Discord server, which had 32,000 members at its peak but has since been removed by its creators.

“Successful installation will allow the malware to harvest keystrokes, screenshots, network activity, and other information from devices where it is installed. It may also covertly monitor user behaviour and harvest Personally Identifiable Information, including names and passwords, keystrokes from emails, chat programs, websites visited, and financial activity. This malware may be capable of covertly collecting screenshots, video recordings, or the ability to activate any connected camera or microphone.”

Read also

Anti-corruption group reacts to court suit against minister of state for petroleum

List of unapproved phones in Nigerian markets that citizens should avoid, as  NCC warns against their use

Recall that the Nigerian Communications Commission (NCC) has cautioned consumers against the patronage and use of devices that have not been approved.

The commission also announced tough sanctions on marketers selling counterfeit devices to Nigerians.

NCC disclosed this in a statement after its team arrested one Yahaya Ado of Gezawa Communications Limited for selling counterfeit Gionee devices.

Source: Legit.ng