The Nigerian Communications Commission has warned Nigerians about the risk of participating in a new TikTok trend called the Invisible Challenge, saying it could expose devices to malware.
The challenge exposes the devices to information-stealing malware, the NCC’s Computer Security Incident Response Team said in a statement signed by spokesman Reuben Muoka.
The advisory said that threat actors were using the challenge to spread an information-stealing malware known as the WASP stealer (or W4SP).
The WASP stealer, which has a high probability with critical damage potential, is a hosted persistent malware that the developers claim is undetectable.
“The Invisible Challenge involves wrapping a somewhat transparent body contouring filter around a presumed nude individual. The attackers are uploading videos to TikTok with a link to software they claim can reverse the effects of the filter,” he said.
“Those who click on the link and try to download the software, known as ‘unfiltered’, are infected with the WASP stealer. The suspended accounts accumulated more than a million views after initially posting the linked videos,” the commission said.
The NCC said that some ways to prevent such attacks are to avoid clicking on suspicious links and to use anti-malware software on your devices.
Additionally, it will be helpful to review the app tray and remove any apps that a user doesn’t remember installing or are inactive and adopt healthy password hygiene practices, such as using a password manager.
The CSIRT is the cybersecurity incident center for the telecommunications sector created by the ICON focus on incidents in the telecom sector and how they may affect telecom consumers and citizens in general.