The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned that a new phishing, attacks exploit windows zero-day
vulnerability can load a malicious QBot malware on the compromised device without triggering any windows security alerts.
In its advisory issued in a statement by the director of public affairs, Reuben Muoka, NCC-CSIRT indicated that the vulnerability, which is present in all versions of windows-based products, presents as phishing attacks and malware threats. NCC-CSIRT reports that ProxyLife security researcher discovered the new phishing exploit on Windows zero-day vulnerability to drop a Qbot malware without displaying Mark of the Web security warnings.“To take advantage of the Windows Mark of the Web zero-day vulnerability, threat actors have switched to a new phishing strategy that involves propagating JS files signed with forged signatures.
“When the link is clicked, a password-protected ZIP folder that includes another zip file and an IMG file is downloaded. Normally, launching the JS file in Windows would result in a Mark of the Web security warning because it is an Internet-based file. However, the forged signature permits the JS script to function and load the malicious QBot program without triggering any Windows security alerts,” the advisory said.
Nigeria Latest News, Nigeria Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
NCC warns of phishing attack exploitThe Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new phishing, attacks exploit windows
Read more »
INEC working with NCC to counter result transmission issues in 2023 – YakubuProf. Mahmood Yakubu, Chairman of the Independent National Electoral Commission (INEC), says the commission is already working to resolve election result
Read more »
INEC: We’re working with NCC to address result transmission from poor network areas | TheCableINEC says it is working with the NCC to resolve network issues that may arise over uploading of results for the 2023 elections.
Read more »
NCC seeks judiciary's interest in ICT trendsThe Nigerian Communications Commission (NCC) is seeking the nation's judiciary to be part of Information Communications Technology (ICT) trends, with
Read more »
2023: INEC, NCC meet Tuesday over E-transmission of resultsThe Chairman of Independent National Electoral Commission (INEC), Prof. Mahmood Yakubu, yesterday, said the commission
Read more »
![BREAKING: Unknown gunmen attack mosque in Delta State [DETAILS]](https://i.headtopics.com/images/2022/12/2/nigerianewsdesk/breaking-unknown-gunmen-attack-mosque-in-delta-sta-breaking-unknown-gunmen-attack-mosque-in-delta-sta-1598646303864786944.webp?w=640)
BREAKING: Unknown gunmen attack mosque in Delta State [DETAILS]Some unknown gunmen on Friday morning attacked a mosque in Ughelli, Delta state, South-South Nigeria, injuring about 11 worshippers.
Read more »