News
NCC warns of phishing attack exploit
![](https://www.tracknews.ng/wp-content/uploads/2022/12/IMG-20221204-WA0008.jpg)
The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has warned that a new phishing, attacks exploit windows zero-day vulnerability, can load a malicious QBot malware on the compromised device without triggering any Windows security alerts.
In its advisory, NCC-CSIRT indicated that the vulnerability, which is present in all versions of Windows-based products, presents as Phishing Attacks and Malware threats.
NCC-CSIRT reports that ProxyLife security researcher discovered the new phishing exploit on Windows zero-day vulnerability to drop a Qbot malware without displaying Mark of the Web (MoTW) security warnings.
“To take advantage of the Windows Mark of the Web zero-day vulnerability, threat actors have switched to a new phishing strategy that involves propagating JS files (plain text files that include JavaScript code) signed with forged signatures. The newest phishing attempt begins with an email that contains a password for the file along with a link to an allegedly important document.
“When the link is clicked, a password-protected ZIP folder that includes another zip file and an IMG file is downloaded. Normally, launching the JS file in Windows would result in a Mark of the Web security warning because it is an Internet-based file. However, the forged signature permits the JS script to function and load the malicious QBot program without triggering any Windows security alerts,” the advisory said
-
Crime5 days ago
Jubilation as Bandits’ Kingpin, Dogo Gide, Protects Farmers In Zamfara
-
Sports5 days ago
Gov Diri’s 5th International Scouting Program Gets Underway in Yenagoa
-
Politics5 days ago
You failed as Senator, defend election riggers – Wike slams Shehu Sani, Ozekhome
-
Entertainment5 days ago
Nicki Minaj congratulates Davido, Chioma
-
Sports5 days ago
Bayelsa State government committed to Para sports development says Daniel Igali
-
News5 days ago
‘Reopen borders for legal food imports,’ FCCPC urges govt.
-
Crime5 days ago
EFCC Arrests 117 Suspected Internet Fraudsters In Lagos
-
Business5 days ago
Almost 4Million Nigerians Applied For N50,000 Tinubu Govt’s Palliative, Only 1 Million Will Get – Minister