• About
  • Advertise
  • Privacy & Policy
  • Contact
Thursday, July 3, 2025
  • Login
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
Advertisement
  • Cover
  • News
  • Politics
  • Business
  • Security
  • Entertainment
  • World
  • Sports
  • Editorial
  • Interview
No Result
View All Result
Newsdesk Africa
No Result
View All Result
Home Business

NCC-CSIRT warns of Phishing Attack Exploit

Euclid Myke by Euclid Myke
December 3, 2022
in Business
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing, Attacks Exploit Windows Zero-Day Vulnerability, can load a malicious QBot malware on the compromised device without triggering any Windows security alerts. 

In its advisory, NCC-CSIRT indicated that the vulnerability, which is present in all versions of Windows-based products, presents as Phishing Attacks and Malware threats, according to Reuben Muoka,  Director,  PublicAffairs,  at NCC.

He said: “NCC-CSIRT reports that ProxyLife security researcher discovered the new phishing exploit on Windows zero-day vulnerability to drop a Qbot malware without displaying Mark of the Web (MoTW) security warnings.

“To take advantage of the Windows Mark of the Web zero-day vulnerability, threat actors have switched to a new phishing strategy that involves propagating JS files (plain text files that include JavaScript code) signed with forged signatures. 

“The newest phishing attempt begins with an email that contains a password for the file along with a link to an allegedly important document.

“When the link is clicked, a password-protected ZIP folder that includes another zip file and an IMG file is downloaded. Normally, launching the JS file in Windows would result in a Mark of the Web security warning because it is an Internet-based file. 

“However, the forged signature permits the JS script to function and load the malicious QBot program without triggering any Windows security alerts,” the advisory stated.

Accordingly, NCC-CSIRT advised that users apply updates per vendor instructions. 

Muoka reminded that, “The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

“The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events”.

Previous Post

NNPC/CNL Joint Venture secures $1.4B financing for infill drilling program

Next Post

Tears, anguish, as more Nigerians grapple with escalating poverty, hunger   

Next Post

Tears, anguish, as more Nigerians grapple with escalating poverty, hunger   

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

https://youtu.be/FHyJ1Wr0FAk?si=0WVYI_2OR4OrIrQ4
https://youtu.be/gbE3azm_Io0?si=GdE3Mqelo1ujTNla
Mixed reactions as over 200 Boko Haram terrorists surrender to MNJTF troops in Bol, Borno State 
Cover

Mixed reactions as over 200 Boko Haram terrorists surrender to MNJTF troops in Bol, Borno State 

by Maurice Okosisi
July 2, 2025
0

About 210 Boko Haram terrorists, including conscripted fighters and their families, have surrendered to troops of the Multinational Joint Task...

Read moreDetails
Telecom subscribers groan over poor MNOs services

Creeping out of internet poverty index

July 2, 2025
Police arrest AGIS staff as Wike goes after insiders who allegedly exposed land allocations to son

Police arrest AGIS staff as Wike goes after insiders who allegedly exposed land allocations to son

July 2, 2025
NNPCL announces milestone on AKK Pipeline, records 100% crude oil pipeline availability 

NNPCL announces milestone on AKK Pipeline, records 100% crude oil pipeline availability 

July 2, 2025
NNPCL announces milestone on AKK Pipeline, records 100% crude oil pipeline availability 

NNPCL rakes in N6.008trn revenue in May, as production rises to 1.7mbpd

July 2, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Homepage

Copyright© 2022-2025 Newsdesk Africa Published by Glossy Affairs Ltd. Tel: +2348152359152. Email: info@newsdeskafrica.com.ng editor@newsdeskafrica.com.ng