The Nigerian Communications Commission (NCC), again has raised alarm over a malware targeting Android phones. The Commission, in a statement signed by its Director of Public Affairs, Dr. Ikechukwu Adinde, warned the Nigerian public of the “new high-risk” malware named TangleBot, spreading through SMS.

NCC said the disclosure on TangleBot was made in a recent security advisory made available to the Commission’s New Media and Information Security Department by the Nigerian Computer Emergency Response Team (ngCERT).

“TangleBot employs more or less similar tactics as the recently-announced notorious FlutBot SMS Android malware that targets mobile devices. TangleBot equally gains control of the device but in far more invasive manner than the FlutBot malware.

“TangleBot Android malware is installed when an unsuspecting user clicks on a malicious link disguised as COVID-19 vaccination appointment-related information in an SMS message or information about fake local power outages that are due to occur,” NCC said in a statement.

TangleBot is the latest of many cases of malware attacks targeting Nigerian mobile phone users. Late last year, the NCC also sounded a warning about FluBot, a mobile banking app impersonating malware targeting Android users.

The Commission said the aim behind both or either of the messages (on COVID-19 or impending power outages) from TangleBot is to encourage potential victims to follow a link that supposedly offers detailed information.

“Once at the page, users are asked to update applications such as Adobe Flash Player to view the page’s content by going through nine (9) dialogue boxes to give acceptance to different permissions that will allow the malware operators initiate the malware configuration process,” it said.

Highlighting the consequence of the above, the Commission said that TangleBot gains access to several different permissions when installed on a device, allowing it to eavesdrop on user communications. The malware then steals sensitive data stored on the device and monitors almost every user activity, including camera use, audio conversations, and location, among other things.

In addition, the malware takes complete control of the targeted device, including access to banking data, and can reach the deepest recesses of the Android operating system.

Thus, while warning Nigerian mobile phone users to be wary of wiles being used by cybercriminals to commit fraud, outlined measures to take to avoid being a victim. Read below:

These measures include an advisory to telecom consumers and other Internet users to refrain from opening Uniform Resource Locators (URLs) from unknown sources while using your mobile devices.

Additionally, telecom consumers should never respond or send replies to messages or call back a phone number that is associated with the text that they are unaware of. Should any telecom consumer or Internet user become curious and wish to ascertain the authenticity of any call or messages and wish to probe the incident, such persons may do a web search of both the number and the message content.

The NCC hereby reiterates that mobile users are under obligation to practice safe messaging practices and avoid clicking on any links in texts, even if they appear to come from a legitimate contact. Indeed, it is important to be judicious when downloading apps by reading install prompts closely, looking out for information regarding rights and privileges that the app may request.

Other risk-mitigating measures advised by ngCERT is for users to be cautious of procuring any software from outside a certified app store. Advisedly, it is safer to call the company directly rather than using the phone number on the message received, especially if the message is spoofing a company. Finally, telecom consumers and other Internet users should report any incident of system compromise to ngCERT via incident@cert.gov.ng for necessary support and technical assistance.

At Tekedia Capital, we define disruptive innovation startups as startups which introduce technology-anchored and -enabled products or services that bring new basis of competition in the market. These startups have the capacity to rewire the ordinance of market systems, creating leverageable factors which can compound, outperforming the market. We find them in all industrial sectors – and we like to support them!

Join me to support them at Tekedia Capital where we’re building the foundations of the next Africa.

Tekedia Capital invests in technology-anchored early stage startups and companies. Our opportunity antenna and grassroot connections with innovators enable us to see patterns as they develop.  We invite you to partner with us as we nurture and build category-king companies in Africa and beyond, and in the process advance citizens, communities and nations. At Tekedia Capital, we fund the foundations of the NEXT African economy.

Extra 200 participants are joining Tekedia Institute Mini-MBA from India, according to an update this morning, from our India-based Lead Asif Chowgule. I told him that Tekedia will create a dedicated program with focus on India as the numbers are significantly ramping up. This is in recognition that India is one of the fastest growing markets for Tekedia Mini-MBA and Tekedia Startup Masterclass.

Yet, we will make sure that we’re glocal, using cases which help all learners, encapsulating local and global perspectives. In all our programs including Tekedia Mini-MBA, Tekedia Startup Masterclass, Tekedia Practice, Tekedia Industries and Phase 1  Corporate Virtual programs, you will see a new course, from Feb 7: “25 Startup Innovation Cases (10 Africa, 5 USA, 5 India, 5 China)”.

To make things easier, here is a table of all programs with costs – and how to join