{"id":67226,"date":"2022-12-03T19:44:51","date_gmt":"2022-12-03T18:44:51","guid":{"rendered":"https:\/\/nationalwire.com.ng\/?p=67226"},"modified":"2022-12-03T19:44:51","modified_gmt":"2022-12-03T18:44:51","slug":"ncc-csirt-warns-of-phishing-attack-exploit-2","status":"publish","type":"post","link":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/","title":{"rendered":"NCC-CSIRT Warns Of Phishing Attack Exploit"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing, Attacks Exploit Windows Zero-Day Vulnerability, can load a malicious QBot malware on the compromised device without triggering any Windows security alerts.<\/p>\n

In its advisory, NCC-CSIRT indicated that the vulnerability, which is present in all versions of Windows-based products, presents as Phishing Attacks and Malware threats.<\/p>\n

NCC-CSIRT reports that ProxyLife security researcher discovered the new phishing exploit on Windows zero-day vulnerability to drop a Qbot malware without displaying Mark of the Web (MoTW) security warnings.<\/p>\n

\u201cTo take advantage of the Windows Mark of the Web zero-day vulnerability, threat actors have switched to a new phishing strategy that involves propagating JS files (plain text files that include JavaScript code) signed with forged signatures. The newest phishing attempt begins with an email that contains a password for the file along with a link to an allegedly important document.<\/p>\n

\u201cWhen the link is clicked, a password-protected ZIP folder that includes another zip file and an IMG file is downloaded. Normally, launching the JS file in Windows would result in a Mark of the Web security warning because it is an Internet-based file. However, the forged signature permits the JS script to function and load the malicious QBot program without triggering any Windows security alerts,\u201d the advisory said.<\/p>

\r\n
Advertisement<\/div>\r\n\t\t\t\t\t\t\t<\/a>\r\n \r\n\t\t\t\t\t\t\t<\/div>\n

Accordingly, NCC-CSIRT advised that users apply updates per vendor instructions.<\/p>\n

The CSIRT is the telecom sector\u2019s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.<\/p>\n

The CSIRT also works collaboratively with ngCERT, established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.<\/p>\n

\n

\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/p>","protected":false},"excerpt":{"rendered":"

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing, Attacks Exploit Windows Zero-Day Vulnerability, can load a malicious QBot malware on the compromised device without triggering any Windows security alerts<\/p>\n","protected":false},"author":6,"featured_media":66552,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[23,17],"tags":[648],"coauthors":[2391],"class_list":["post-67226","post","type-post","status-publish","format-standard","has-post-thumbnail","","category-business","category-news","tag-ncc"],"yoast_head":"\nNCC-CSIRT Warns Of Phishing Attack Exploit - National Wire<\/title>\n<meta name=\"description\" content=\"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing,\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NCC-CSIRT Warns Of Phishing Attack Exploit - National Wire\" \/>\n<meta property=\"og:description\" content=\"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/\" \/>\n<meta property=\"og:site_name\" content=\"National Wire\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-03T18:44:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1080\" \/>\n\t<meta property=\"og:image:height\" content=\"963\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Friday Ekeoba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#website\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/\",\"name\":\"National Wire\",\"description\":\"About Nigerians, Nigerian Business and Other Stories\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nationalwire.com.ng\/sub\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#primaryimage\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg\",\"contentUrl\":\"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg\",\"width\":1080,\"height\":963},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#webpage\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/\",\"name\":\"NCC-CSIRT Warns Of Phishing Attack Exploit - National Wire\",\"isPartOf\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#primaryimage\"},\"datePublished\":\"2022-12-03T18:44:51+00:00\",\"dateModified\":\"2022-12-03T18:44:51+00:00\",\"author\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927\"},\"description\":\"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing,\",\"breadcrumb\":{\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nationalwire.com.ng\/sub\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NCC-CSIRT Warns Of Phishing Attack Exploit\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927\",\"name\":\"Friday Ekeoba\",\"url\":\"https:\/\/nationalwire.com.ng\/sub\/author\/friday\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NCC-CSIRT Warns Of Phishing Attack Exploit - National Wire","description":"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing,","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/","og_locale":"en_US","og_type":"article","og_title":"NCC-CSIRT Warns Of Phishing Attack Exploit - National Wire","og_description":"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing,","og_url":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/","og_site_name":"National Wire","article_published_time":"2022-12-03T18:44:51+00:00","og_image":[{"width":1080,"height":963,"url":"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Friday Ekeoba","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/nationalwire.com.ng\/sub\/#website","url":"https:\/\/nationalwire.com.ng\/sub\/","name":"National Wire","description":"About Nigerians, Nigerian Business and Other Stories","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nationalwire.com.ng\/sub\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#primaryimage","url":"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg","contentUrl":"https:\/\/nationalwire.com.ng\/sub\/wp-content\/uploads\/2022\/11\/IMG-20221113-WA0031.jpg","width":1080,"height":963},{"@type":"WebPage","@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#webpage","url":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/","name":"NCC-CSIRT Warns Of Phishing Attack Exploit - National Wire","isPartOf":{"@id":"https:\/\/nationalwire.com.ng\/sub\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#primaryimage"},"datePublished":"2022-12-03T18:44:51+00:00","dateModified":"2022-12-03T18:44:51+00:00","author":{"@id":"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927"},"description":"The Nigerian Communications Commission's Computer Security Incident Response Team (NCC-CSIRT) has warned that a new Phishing,","breadcrumb":{"@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nationalwire.com.ng\/sub\/ncc-csirt-warns-of-phishing-attack-exploit-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nationalwire.com.ng\/sub\/"},{"@type":"ListItem","position":2,"name":"NCC-CSIRT Warns Of Phishing Attack Exploit"}]},{"@type":"Person","@id":"https:\/\/nationalwire.com.ng\/sub\/#\/schema\/person\/e2ab303e561d755b325fc9cea3854927","name":"Friday Ekeoba","url":"https:\/\/nationalwire.com.ng\/sub\/author\/friday\/"}]}},"_links":{"self":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/67226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/comments?post=67226"}],"version-history":[{"count":1,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/67226\/revisions"}],"predecessor-version":[{"id":67227,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/posts\/67226\/revisions\/67227"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/media\/66552"}],"wp:attachment":[{"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/media?parent=67226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/categories?post=67226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/tags?post=67226"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/nationalwire.com.ng\/sub\/wp-json\/wp\/v2\/coauthors?post=67226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}