Categories: NewsNigeria News

Latest TikTok Challenge Used To Steal Information From Devices, NCC Warns

The latest TikTok challenge is used to steal information from devices, NCC has warned.

 

Glamtush reports that the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned about the potential harm of taking part in the Invisible Challenge on short-form video hosting service, TikTok, revealing that it exposes devices to Information-Stealing Malware.

This online news understands that an NCC-CSIRT advisory said threat actors have taken advantage of a viral TikTok challenge, known as the Invisible Challenge, to disseminate an information-stealing malware known as the WASP (or W4SP) stealer.

The WASP stealer, which is high in probability with critical damage potential, is a persistent malware hosted on discord that its developer claim is undetectable.

The advisory said “The Invisible Challenge involves wrapping a somewhat transparent body contouring filter around a presumed naked individual. Attackers are uploading videos to TikTok with a link to software that they claim can reverse the filter’s effects.

“Those who click on the link and attempt to download the software, known as “unfilter,” are infected with the WASP stealer. Suspended accounts had amassed over a million views after initially posting the videos with a link. Following the link leads to the “Space Unfilter” Discord server, which had 32,000 members at its peak but has since been removed by its creators.

“Successful installation will allow the malware to harvest keystrokes, screenshots, network activity, and other information from devices where it is installed. It may also covertly monitor user behaviour and harvest Personally Identifiable Information (PII), including names and passwords, keystrokes from emails, chat programs, websites visited, and financial activity. This malware may be capable of covertly collecting screenshots, video recordings, or the ability to activate any connected camera or microphone,” it explained.

The Team said some ways to forestall such an attack include avoiding clicking on suspicious links, using anti-malware software on your devices, checking the app tray and removing any apps that you do not remember installing or that are dormant and embracing healthy password hygiene practices such as using a password manager.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with Nigerian Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

GLAMTUSH

Recent Posts

PHOTOS: Davido Receives Luxury Car From Auto Firm For 32nd Birthday

Davido has received a luxury car from an auto firm for his 32nd birthday.  …

15 hours ago

VIDEO: How Primate Ayodele Foretold Simon Ekpa’s Arrest In 2023

Simon Ekpa, a Finnish-Nigerian separatist agitator and self-proclaimed Prime Minister of the Biafra Republic Government…

15 hours ago

Speaker Obasa Clarifies Negative Perceptions As Sanwo-Olu Presents 2025 Budget

Accuses detractors of peddling news of alleged governorship ambition.   Speaker of the Lagos State…

16 hours ago

Simon Ekpa, Four Others Arrested In Finland Over Terrorism Activities

Simon Ekpa and four others have been arrested in Finland over terrorism activities.   Glamtush…

20 hours ago

Davido Celebrates 32nd Birthday With ₦300m Donation To Orphanages

Davido is excited to celebrate his 32nd birthday with a ₦300m donation to orphanages.  …

21 hours ago

America Returnee Found Dead In Ogun Hotel

An American returnee has been found dead in an Ogun hotel.   Glamtush reports that…

22 hours ago