The Nigerian Communication Commission, Computer Security Incidence Response Team, NCC-CSIRT, has warned the general public about the tactics deployed recently by hackers using a short video service called TokTok to steal information through Stealing Malware. An NCC-CSIRT advisory has revealed that threat actors chose to flow with the trend of the viral video Challenge, known as the invisible Challenge to disseminate an Information-Stealing malware known as the WASP (or W4SP) stealer.
He explained that the stealer has a high probability of causing critical damage to the device, describing it as a persistent malware that is hosted on discord that its developer claim is undetectable.
In his advisory statement, he said, “The Invisible Challenge involves wrapping a somewhat transparent body contouring filter around a presumed naked individual. Attackers are uploading videos to TikTok with a link to software that they claim can reverse the filter’s effects.
“Those who click on the link and attempt to download the software, known as “unfilter,” are infected with the WASP stealer. Suspended accounts had amassed over a million views after initially posting the videos with a link. Following the link leads to the “Space Unfilter” Discord server, which had 32,000 members at its peak, but has since been removed by its creators.
He added that “Successful installation will allow the malware to harvest keystrokes, screenshots, network activity, and other information from devices where it is installed. It may also covertly monitor user behavior and harvest Personally Identifiable
Information (PII), including names and passwords, keystrokes from emails, chat programs, websites visited, and financial activity.
This malware may be capable of covertly collecting screenshots, video recordings, or the ability to activate any connected camera or microphone,”
The CSIRT team said the most reliable way to forestall such attacks is to avoid clicking on suspicious links, use anti-malware software on devices, checking of the app tray and remove any apps that you do not remember installing on your device as well as embrace healthy passwords and hygiene practice like passwords managers.
The CSIRT team also works with Nigerian Computer Emergency Response Team, ngCERT, set up by the Federal government to arrest future computer risk incidents through the preparation, protecting, and securing of Nigerian Cyberspace to forestall all forms of attack and other related problems.
 "Dubai Submerged In Flood")