There are now aggressive hackers using several phishing websites promoted through Facebook Messenger accounts to spread various types of malware.
Cyber security report obtained from the National Technology Development Agency (NITDA) cyber security team, revaled that the illegitimate Facebook accounts poses off as an official ChatGPT page and publishes links that leads
users to phishing websites that look like ChatGPT website. This websites trick users into downloading malicious files or software onto their machines.
According to the report, when an unsuspecting user clicks on a link on the Facebook page, it directs the user to a phishing website that features a number of malware that are masquerading as ChatGPT and its variants.
similarly, if a user downloads any of the proposed software that contains potentially harmful executable files, the user’s device is susceptible to theft of sensitive data like call logs, contacts list, SMS, media files and others.
NITDA warns users to be wary of clicking on links unsure of, avoid downloading files or Apps from unknown
websites, ensure devices, applications, and operating systems are updated.
It recommended download and install apps only from Google Play Store, I0S App Store or other trusted sources.
Install Anti-virus or Anti-malware on your devices.
The report also gave an overview of the new Nexus Android banking, trojan designed to operate stealthily, with the ability to hide from detection and evade security measures.
A staggering variety of different banking and financial apps are susceptible to attack by this Trojan. The malware is being distributed through phishing pages disguised as legitimate websites called YouTube Vanced.
On the impact, the report indicated that the trojan can intercept and steal sensitive data, including login credentials, credit card information, and other financial information, once it has been installed on your device.
Additionaly, it has the ability to intercept codes from the Google Authenticator app as well as two-factor authentication messages delivered by text.
The banking malware can also delete text messages that have been received on an infected device and periodically update itself by pinging a command-and-control server that is under the control of cybercriminals.
Leave a Reply