Close Menu
The Reporters
  • Home
  • News
  • Politics
  • Crime
  • Health
  • Features
  • Economy
  • Environment
  • Entertainment
  • Business
  • Technology
  • Education
  • Sports
  • Tourism
  • Judiciary
  • Judiciary
  • Foreign
  • Agriculture
  • Religion
  • Weather
  • Banking
  • Labour
  • Faith
  • Advertisment
Facebook X (Twitter) Instagram
  • Home
  • Lifestyle
  • Travel
  • Buy Now
Facebook X (Twitter) Instagram Pinterest Vimeo
The Reporters
  • Home
  • News
  • Politics
  • Crime
  • Health
  • Features
  • Economy
  • Environment
  • Entertainment
  • Business
  • Technology
  • Education
  • Sports
  • Tourism
  • Judiciary
  • Judiciary
  • Foreign
  • Agriculture
  • Religion
  • Weather
  • Banking
  • Labour
  • Faith
  • Advertisment
Subscribe
The Reporters
Telecommunications

NCC-CSIRT Warns of Phishing Attack Exploit

AdminBy AdminDecember 3, 2022No Comments2 Mins Read
Spread the love

Abuja.

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing, Attacks Exploit Windows Zero-Day Vulnerability, can load a malicious QBot malware on the compromised device without triggering any Windows security alerts.

This is contained in a statement signed by Reuben Muoka,Director, Public Affairs of NCC in Abuja and a copy made available to The Reporters on Saturday.

Muoka qouted NCC as saying that in its advisory, NCC-CSIRT indicated that the vulnerability, which is present in all versions of Windows-based products, presents as Phishing Attacks and Malware threats.

NCC-CSIRT reports that ProxyLife security researcher discovered the new phishing exploit on Windows zero-day vulnerability to drop a Qbot malware without displaying Mark of the Web (MoTW) security warnings.

“To take advantage of the Windows Mark of the Web zero-day vulnerability, threat actors have switched to a new phishing strategy that involves propagating JS files (plain text files that include JavaScript code) signed with forged signatures. The newest phishing attempt begins with an email that contains a password for the file along with a link to an allegedly important document.

“When the link is clicked, a password-protected ZIP folder that includes another zip file and an IMG file is downloaded. Normally, launching the JS file in Windows would result in a Mark of the Web security warning because it is an Internet-based file. However, the forged signature permits the JS script to function and load the malicious QBot program without triggering any Windows security alerts,” the advisory said.

Accordingly, NCC-CSIRT advised that users apply updates per vendor instructions.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

Visited 4 times, 1 visit(s) today
Previous ArticleAttah Igala inaugurates Italo Committee; Revives Annual Festival
Next Article Kogi Security Trust Fund boosts security with Motorcycles To Hunters
Admin

Related Posts

NCC Boss Declares Telecom Infrastructure As Key to National Security, Digital Future

August 17, 2025

NCC Boss Welcomes Board Chairman-designate, members

August 15, 2025

NCC Welcomes Newly Appointed Board Members, Pledges Commitment to Advancing Nigeria’s Digital Economy 

August 15, 2025

Leave A Reply Cancel Reply

Recent Posts
  • Ogori-Magongo Shines as Back-to-School Support Programme Flags Off
  • Ododo’s N300,000 Lifeline for Doctors: How Kogi is Tackling ‘Japa’ , Reviving Healthcare
  • Bandits Abduct Niger Electoral Commissioner, Ex-UBEB Boss, Others
  • OPWS Troops Crush Bandits, Recover Weapons in Benue
  • False Claims Against Tinubu: Court Adjourns Sowore’s Arraignment to Oct. 27
© 2025 The Reporters. Designed by Domo Tech Media .
  • Home
  • Contact Us
  • About Us
  • Posts
  • Privacy Policy

Type above and press Enter to search. Press Esc to cancel.