• Home
  • ARTICLES
  • NEWS
  • BUSINESS
  • EDUCATION
  • ENTERTAINMENT
  • HEALTH
  • POLITICS
  • TECHNOLOGY
  • CRIME
  • METRO
  • SPORTS
  • NEWS EXTRA
  • JOBS & SCHOLARSHIPS
  • TRENDING VIDEO
  • ABOUT US
  • CONTACT US
  • PRIVACY POLICY
  • TERMS OF USAGE
  • ADVERTISE WITH US
DAILY GIST
  • Home
  • ARTICLES
  • NEWS
  • BUSINESS
  • EDUCATION
  • ENTERTAINMENT
  • HEALTH
  • POLITICS
  • TECHNOLOGY
  • CRIME
  • METRO
  • SPORTS
  • NEWS EXTRA
  • JOBS & SCHOLARSHIPS
  • TRENDING VIDEO
  • ABOUT US
  • CONTACT US
  • PRIVACY POLICY
  • TERMS OF USAGE
  • ADVERTISE WITH US
No Result
View All Result
  • Home
  • ARTICLES
  • NEWS
  • BUSINESS
  • EDUCATION
  • ENTERTAINMENT
  • HEALTH
  • POLITICS
  • TECHNOLOGY
  • CRIME
  • METRO
  • SPORTS
  • NEWS EXTRA
  • JOBS & SCHOLARSHIPS
  • TRENDING VIDEO
  • ABOUT US
  • CONTACT US
  • PRIVACY POLICY
  • TERMS OF USAGE
  • ADVERTISE WITH US
No Result
View All Result
DAILY GIST
No Result
View All Result

ALERT! How Cyber Attackers Access Mobile Phones When Charging — NCC

Adam PR by Adam PR
January 28, 2022
in TECHNOLOGY
0
ALERT! How Cyber Attackers Access Mobile Phones When Charging — NCC
20.7k
SHARES
20.7k
VIEWS
Share on WhatsAppShare on TwitterShare on Facebook

The Nigerian Communications Commission’s Cyber Security Incident Response Team has alerted Nigerians on a method used by cyber attackers to gain unauthorised entry into unsuspecting mobile phone users devices when they charge their mobile phones at public charging stations.

NCC-CSIRT said the method, known as Juice Jacking, is part of two cyber vulnerabilities it identified, the other being Facebook for Android Friend Acceptance Vulnerability, which targets only Android Operating System.

This was disclosed in a statement titled, ‘NCC-CSIRT Identifies Two Cyber Vulnerabilities,’ signed by the Director, Public Affairs, Dr Ikechukwu Adinde.

The statement read, “The CSIRT, in its first-ever security advisories less than three months after its creation, has solely identified the two cyber-attacks targeting the consumers and proffer solutions that can help telecom consumers from falling victims to the two cyber vulnerabilities.

“The first is described as Juice Jacking, which can gain access into consumers’ devices when charging mobile phones at public charging stations and it applies to all mobile phones. The other is a Facebook for Android Friend Acceptance Vulnerability, which targets only Android Operating System.

“According to CSIRT security Advisory 0001 released on January 26, 2022, with Juice Jacking, attackers have found a new way to gain unauthorised entry into unsuspecting mobile phone users devices when they charge their mobile phones at public charging stations.

ALSOREAD

APPLY: NCC Opens Application Portal, Offers N10million Grant

BREAKING: Ogun State Govt Official Website Hacked

NCC Opens Up On Leaked Audio Of Peter Obi And Oyedepo

RED ALERT! NCC Warns Nigerians On New Ways Hackers Steal Data Through Google Chrome

NCC Reacts To Proposed Data, SMS Cost Hike By MTN, Airtel, Others

“Many public spaces, restaurants, malls and even in the public trains do offer complementary services to their customers in a bid to enhance customer services, one of which is providing charging ports or sockets.

“However, an attacker can leverage this courtesy to load a payload in the charging station or on the cables they would leave plugged in at the stations.

“Once unsuspecting persons plug their phones at the charging station or the cable left by the attacker, the payload is automatically downloaded on the victims’ phone. This payload then gives the attacker remote access to the mobile phone, allowing them to monitor data transmitted as text, or audio using the microphone. The attacker can even watch the victim in real time if the victims’ camera is not covered. The attacker is also given full access to the gallery and also to the phone’s Global Positioning System (GPS) location.

“When an attacker gains access to a user’s Mobile phone, he gets remote access to the User’s phone which leads to breach in Confidentiality, Violation of Data Integrity and bypass of Authentication Mechanisms. Symptoms of attack may include sudden spike in battery consumption, device operating slower than usual, apps taking a long time to load, and when they load they crash frequently and cause abnormal data usage.”

The NCC-CSIRT, however, proffered solutions to include using ‘charging only USB cable’ to avoid Universal Serial Bus (USB) data connection; using one’s AC charging adaptor in public space; and not granting trust to portable devices prompt for USB data connection.

“Other preventive measures against Juice Jacking include installing Antivirus and updating them to the latest definitions always; keeping mobile devices up to date with the latest patches; using one’s own power bank; keeping mobile phone off when charging in public places; as well as ensuring use of one’s own charger, if one must charge in public.

“On the other hand, the NCC-CSIRT Advisory 0001 of January 27, 2022, warns that Facebook for Android is vulnerable to a permission issue which gives privilege to anyone with physical access to the android device to accept friend requests without unlocking the phone. The products affected include Versions 329.0.0.29.120 of Android OS.

“With this, the attacker will be able to add the victim as a friend and collect personal information of the victim, such as Email, Date of Birth, Check-ins, Mobile phone number, Address, Pictures and other information that the victim may have shared, which would only be visible to his/her friends.

“However, to be protected from the Facebook-associated vulnerability, NCC-CSIRT in the security advisory recommends to users to disable the feature from their device’s lock screen notification settings.

“The NCC-CSIRT was inaugurated in October, 2021 to provide guidance and direction for the constituents in dealing with issues relating to the security of critical infrastructure in their possession, and periodically assess, review and collate the threat landscape, risks, and opportunities affecting the communications sector, in order to provide advice to relevant stakeholders in those regards.

“As the telecoms-industry specific intervention, the objective of which aligns with the objective of the National Cybersecurity Policy and Strategy (NCPS) document published by the Office of the National Security Adviser (ONSA), the NCC-CSIRT ensures continuous improvement of processes and communication frameworks to guarantee secure and collaborative exchange of timely information while responding to cyber threats within the sector.

“In recent times, NCC-CSIRT has raised series of cyber-vulnerability awareness based on security advisories it receives from the Nigerian Cybersecurity Emergency Response Team (ngCERT), which is the national body for the implementation of the NCPS objective. However, Juice Jacking and Facebook for Android Friend Acceptance Vulnerabilities are the two first-ever cyber vulnerabilities published by the NCC-CSIRT,” the statement concluded.

Share This News

FOR ADVERTS, PUBLICATION AND PROMOTIONS, CONTACT DAILY GIST ON WHATSAPP – 09061956151

JOIN US ON SOCIAL MEDIA

TWITTER — https://twitter.com/NaijamediaNews

THREADS —https://www.threads.net/@dailygistonline

FACEBOOK — https://m.facebook.com/oauvoices

INSTAGRAM —https://www.instagram.com/dailygistonline/ 

 

Tags: HackersNCC
Previous Post

BREAKING: Nigerian Police Helicopter Crashes

Next Post

CBN Reduces Bank Charges, Removes ATM Fee, Others

Adam PR

Adam PR

AdamPR is a young Blogger, Publisher, Web Designer. For Adverts and Publications, He can be reached on WhatsApp - 09061956151

Related Posts

JUST IN: Google Appoints New Managing Director For Africa
TECHNOLOGY

JUST IN: Google Appoints New Managing Director For Africa

September 5, 2023
BREAKING: Senate Unveils 28 Tinubu’s Ministerial List
TECHNOLOGY

BREAKING: Tinubu Sacks NIMC DG, Makes New Appointments

August 23, 2023
FULL LIST: 10 New Whatsapp Features You Probably Didn’t Know About
TECHNOLOGY

FULL LIST: 10 New Whatsapp Features You Probably Didn’t Know About

August 13, 2023
FULL LIST: FG Launches MSME Tech Hubs In 7 States For 1million Youths, To Disburse N500million
TECHNOLOGY

FULL LIST: FG Launches MSME Tech Hubs In 7 States For 1million Youths, To Disburse N500million

August 6, 2023
JUST IN: Banks To Start Issuing NIN-enabled ATM Cards
TECHNOLOGY

JUST IN: Banks To Start Issuing NIN-enabled ATM Cards

May 25, 2023
NEW FEATURE: 4 Easy Steps To Edit Sent Messages On WhatsApp
TECHNOLOGY

NEW FEATURE: 4 Easy Steps To Edit Sent Messages On WhatsApp

May 23, 2023
Next Post
CBN Reduces Bank Charges, Removes ATM Fee, Others

CBN Reduces Bank Charges, Removes ATM Fee, Others

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

TRENDING NEWS

  • Mohbad at Burial site

    He Was Buried Alive? — Doctor Explains Fresh Blood In Mohbad’s Grave

    22631 shares
    Share 9052 Tweet 5658
  • JUST IN: Police Give Update On Mohbad’s Autopsy, Results

    22376 shares
    Share 8950 Tweet 5594
  • JUST IN: Alaafin Stool: Gov. Makinde Asked To Arrest Oyomesi

    22024 shares
    Share 8810 Tweet 5506
  • Justice For Mohbad: Police React To Video Of Lady Exposing During Candlelight Procession

    21992 shares
    Share 8797 Tweet 5498
  • Why I Wont Cut My Dreadlocks Or Stop Wearing Earrings — Newly Appointed Church General Overseer, Jimmy Odukoya

    21989 shares
    Share 8796 Tweet 5497
  • BREAKING: Supreme Court On Fire

    21971 shares
    Share 8788 Tweet 5493
  • Justice For Mohbad: Trending Video Of Lady Flaunting Her B00b$ During Candlelight Procession

    21958 shares
    Share 8783 Tweet 5490
  • BREAKING: NLC, TUC Declare Total, Indefinite Strike

    21876 shares
    Share 8750 Tweet 5469
  • Police Arrest Nurse Who Gave Mohbad Anti-Tetanus Injection After He Was Beaten At Ikorodu Show

    21638 shares
    Share 8655 Tweet 5410
  • NLC Announces Update On Nationwide Strike After Ultimatum Expires

    21567 shares
    Share 8627 Tweet 5392

DAILY GIST reports Latest News in Nigeria and aims to keep Nigerians updated and informed with Reports and Informations in the aspect of Education, Politics, Health, Business, Technology, Jobs, Entertainment. etc

  • Home
  • ABOUT US
  • CONTACT US
  • PRIVACY POLICY
  • TERMS OF USAGE
  • ADVERTISE WITH US
  • DESIGNED BY ADAMPR

DAILY GIST © 2020 | All Rights Reserved

No Result
View All Result
  • Home
  • ARTICLES
  • NEWS
  • BUSINESS
  • EDUCATION
  • ENTERTAINMENT
  • HEALTH
  • POLITICS
  • TECHNOLOGY
  • CRIME
  • METRO
  • SPORTS
  • NEWS EXTRA
  • JOBS & SCHOLARSHIPS
  • TRENDING VIDEO
  • ABOUT US
  • CONTACT US
  • PRIVACY POLICY
  • TERMS OF USAGE
  • ADVERTISE WITH US

DAILY GIST © 2020 | All Rights Reserved