*The Nigerian Communications Commission’s Computer Security Incident Response Team urges consumers to avoid downloading questionable apps, and they should immediately delete any of such identified malicious apps already installed

Isola Moses | 绿帽献妻

As part of the telecoms sector regulatory Commission’s consumer protection initiatives, the Nigerian Communications Commission’s (NCC) Computer Security Incident Response Team (NCC-CSIRT) has flagged a new malware, HiddenAds.

绿帽献妻 reports the NCC said the new malware, which it noted had infiltrated Google Play Store can negatively impact device performance and jeopardise users鈥� privacy.

In its advisory of August 8, 2022, NCC-CSIRT classified the virus, first identified by the McAfee Mobile Research Team, as high in probability and damage potential.

RELATED: Telecoms Regulator鈥檚 Central Mandate Is To Ensure Consumer Protection 鈹�NCC

The malware infiltrated the Google Play Store in the form of several device cleaners or optimisation apps.

According to the summary provided by NCC-CSIRT, 鈥渦pon installation, it can run malicious services without the user opening the app.

“It also spams the user with irrelevant advertisements.

“The apps have received downloads ranging from 100,000 to over a million.

RELATED Cybersecurity: NCC-CSIRT Identifies 2 Cyber Vulnerabilities, Offers Measures For Consumer Protection

鈥淪ome of the apps HiddenAds masquerades as are: Junk Cleaner, EasyCleaner, Power Doctor, Carpet Clean, Super Clean, Meteor Clean, Strong Clean, Windy Clean, Fingertip Cleaner, Keep Clean, Full Clean 鈥� Clean Cache, Quick Cleaner, and Cool Clean.”

The advisory also explained 鈥渨hen a user installs any of the aforementioned apps, whether the user has opened the app or not, a malicious service is immediately installed on the device.

“The app will then attempt to blend into the app tray by changing its icon to the Google Play icon that every Android user is familiar with.

“Its name will also change to ‘Google Play’ or ‘Setting’. The device will then be bombarded with ads in a variety of deceptive ways, severely impairing the user experience.”

READ ALSO: Danbatta Restates NCC鈥檚 Commitment To Telecoms Consumers鈥� Wellbeing, Highlights SVP 2021-2025

It further warms anyone that installs the compromised app will experience his/his device performance suffering significantly, clicking on the ads may result in stealth downloads/installation of other malware, users may inadvertently subscribe to services and be billed on a monthly basis, and the privacy of users will be jeopardised.

The NCC-CSIRT advised users to avoid downloading questionable apps or apps they are unsure about while those who have installed any of the identified malicious apps should immediately delete them.

It disclosed that where the malicious app’s icon and name have changed, it can be identified by the fact that it is removable while the legitimate Google Play app cannot be uninstalled.

RELATED CyberEspionage: NCC Alerts Nigerians To Hackers鈥� Targeting Telcos, ISPs, Others

The advisory as well recommended the installation of anti-virus/anti-malware software with a proven track record for detecting and removing malware.

The Commission stated it’s Computer Security Incident Response Team (CSIRT) is the telecoms sector鈥檚 cybersecurity incidence centre set up to focus on incidents in the telecom sector and as they may affect telecoms consumers and citizens at large.

The CSIRT also works collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risks incidents by preparing, protecting and securing the Nigerian cyberspace to forestall attacks, problems or related events.