Facebook Twitter LinkedIn RSS
    Trending
    • “Nigeria Digital Heroes” gains major endorsements from NIMC, NACETEM and Galaxybackbone
    • Boosting education technology in Africa’s 1.5 billion population
    • Samsung poised to redefine smartphone experience with next-gen foldables
    • LG launches “Radio Optimism” campaign to spread “life’s good” through music
    • 9mobile leverages MTN network to strengthen services in Nigeria
    • NCC approves national roaming deal between MTN and 9mobile
    • Prioritising Security: The Bedrock of Stronger Workplace Collaboration in Nigeria
    • MTN, Dell Technologies to power businesses with modular Data Centre for enhanced operational efficiency
    Facebook Twitter LinkedIn
    ITPulse.com.ngITPulse.com.ng
    • News
    • Interviews
    • Blogs
    • Analysis
    • Opinion
    • Videos
    • Press Releases
    • Pictures
    • Advertise
    ITPulse.com.ngITPulse.com.ng
    Home»News»NCC-CSIRT flags Xenomorph, Andriod login details stealing Malware
    News 3 Mins Read

    NCC-CSIRT flags Xenomorph, Andriod login details stealing Malware

    mmBy ITPulseDecember 7, 2022
    Facebook Twitter WhatsApp Pinterest LinkedIn Reddit Tumblr Email
    Share
    Facebook Twitter LinkedIn Pinterest Email

    The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has flagged XENOMORPH, a malware that installs Trojan in banking apps on the Android platform to steal login details, raid bank accounts and read the users’ SMS.

    Accordingly, the Computer Security Incident Response Team suggests that owners of compromised devices take the extreme measure of doing factory resetting of infected devices.

    “The malware hijacks your login info from banking apps, and can even read your SMS messages. It installs a banking trojan malware called Xenomorph that allows the app to intercept your two-factor verification codes (typically delivered over text) to raid your logins – and bank account,” the team said.

    It explained that Xenomorph performs overlay attacks by exploiting accessibility permissions in Android, resulting in the overlaying of fraudulent login screens on banking apps aimed at exfiltrating credentials. The Android app makes itself intentionally difficult to delete. You need to search your phone for it immediately and uninstall it.

    “It starts with asking users to enable access permission. Once provided, it adds itself as a device admin and prevents users from disabling Device Admin, making it uninstallable from the phone.  If you haven’t given permission to the app, then you should be able to uninstall it safely. Otherwise, you may have to back up your files and then factory-reset your phone to clear the app completely,” it advised.

    In terms of potential solutions to the malware, NCC-CSIRT advised that “Search your phone for the app and uninstall immediately or backup your files and factory reset your phone.

    “Only search for an app in the Google Play Store, pay close attention to the search results, look at the apps icons, note that fake apps almost always use the icon from the app they’re faking, then look at the developer’s name and make sure it’s from the right developer.

    Also, look at the app’s download count. If the app has a lot of downloads going from millions to hundreds of thousand that’s a clue that it’s the right app.  Then, finally, look at the app’s description and screenshots to ensure that it doesn’t contain multiple spelling or grammar mistakes or otherwise broken English.

    “Make use of Google Play Protect, which regularly scans your apps for malware and will alert you to uninstall rogue apps.”

    The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

    The CSIRT also works collaboratively with Nigeria Cybersecurity Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

    andriod malware XENOMORPH
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email
    mm
    ITPulse
    • Website
    • Facebook
    • Twitter
    • LinkedIn

    ITPulse is a wholly information technology communication (ICT) news website, with a special focus on the African continent. The website provides up-to-date biz-tech news, analysis and comprehensive and thorough insight into the continent's ICT terrain

    Related Posts

    “Nigeria Digital Heroes” gains major endorsements from NIMC, NACETEM and Galaxybackbone

    July 4, 2025

    Boosting education technology in Africa’s 1.5 billion population

    July 4, 2025

    9mobile leverages MTN network to strengthen services in Nigeria

    July 4, 2025

    Leave A Reply Cancel Reply

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Latest Posts

    “Nigeria Digital Heroes” gains major endorsements from NIMC, NACETEM and Galaxybackbone

    July 4, 2025

    Boosting education technology in Africa’s 1.5 billion population

    July 4, 2025

    Samsung poised to redefine smartphone experience with next-gen foldables

    July 4, 2025
    About
    About

    Itpulse.com.ng is a wholly information technology communication (ICT) news website, with special focus on the African continent. The website provides up-to-date biz-tech news, analysis and a comprehensive and thorough insight info the continent's ICT terrain.

    Contact us: editorial@itpulse.com.ng

    Facebook Twitter LinkedIn RSS
    Latest Posts

    “Nigeria Digital Heroes” gains major endorsements from NIMC, NACETEM and Galaxybackbone

    July 4, 2025

    Boosting education technology in Africa’s 1.5 billion population

    July 4, 2025

    Samsung poised to redefine smartphone experience with next-gen foldables

    July 4, 2025
    Popular Posts

    SIM Card related services hit temporary snag, ALTON gives reasons

    July 1, 2025

    Konga celebrates 13 years of  e-Commerce in Nigeria with ‘Yafun Yafun Deals’ anniversary sale

    July 1, 2025

    Over 27million unique wallets interacted with DeFi protocols in May

    June 30, 2025
    © 2017 - 2025 Itpulse. Designed by Max Excellence.
    • Terms & Conditions
    • Privacy Policy
    • Advertise
    • Contact Us

    Type above and press Enter to search. Press Esc to cancel.