Sidebar

Exclusive Reports

29
Fri, Mar

NCC Discovers New Cyber Threats Targeting Windows, Routers

Tech Security
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

The Computer Security Incident Response Team (CSIRT) which was set up by the Nigerian Communications Commission (NCC) has warned Nigerians of two new different cyber threats which target Windows platforms and some routers. This was disclosed in a statement released by the NCC-CSIRT on Thursday, titled ‘NCC Uncovers Cyber Threats to Windows Platforms, Routers.’


The statement reads in part, “The first cyber threat is a ransomware known as ‘Lokilocker’, which is capable of wiping data from all versions of Windows systems or platforms. It causes data loss, and denial of service (DoS), which reduces users’ productivity.

“Lockilocker operates by encrypting user files and renders the compromised system useless if the victim does not pay the demanded ransom in time. To hide the malicious activity, the ransomware displays a fake window update screen, cancels specific processes and services, and completely disables the task manager, windows error reporting, machine firewall, and windows defender of the compromised system.”

The ransomware is also capable of preventing data recovery because it deletes backup files, shadow copies and removes system restore points.

The statement however advised users to have a backup copy of their data, which should be stored offline, in order to protect against infections from LokiLocker and other similar ransomware.

According to CSIRT, “All downloads and email attachments should be opened with caution, even if they are from trusted sites or senders. Users should also ensure their attachments are scanned with an up-to-date anti-malware solution, before opening.”

The second cyberthreat which was discovered by the CSIRT is a Botnet that targets an already known vulnerability of the Microtik version of Routers posing certain threats such as bypass authentication, denial of service (DoS), remote code execution, data loss, sniff password, and unauthorized access.

CSIRT advised users to adopt certain safety precautions to protect against this Botnet such as setting stronger router passwords, updating or applying the most recent patches, disabling the administration interface of the routers from the public, using effective antivirus software with in-built web filtering, and not using illegitimate software versions of legitimate applications.

BLOG COMMENTS POWERED BY DISQUS