The Nigerian Communications Commission’s Cyber Security Incident Response Team has alerted Nigerians on a method used by cyber attackers to gain unauthorised entry into unsuspecting mobile phone users devices when they charge their mobile phones at public charging stations.
NCC-CSIRT said the method, known as Juice Jacking, is part of two cyber vulnerabilities it identified, the other being Facebook for Android Friend Acceptance Vulnerability, which targets only Android Operating System.
This was disclosed in a statement titled, ‘NCC-CSIRT Identifies Two Cyber Vulnerabilities,’ signed by the Director, Public Affairs, Dr Ikechukwu Adinde.
The statement read in part, “The CSIRT, in its first-ever security advisories less than three months after its creation, has solely identified the two cyber-attacks targeting the consumers and proffer solutions that can help telecom consumers from falling victims to the two cyber vulnerabilities.
Also Read
8 Powerful Yet Simple Metaphors that Will Change the Way You Think
“The first is described as Juice Jacking, which can gain access into consumers’ devices when charging mobile phones at public charging stations and it applies to all mobile phones. The other is a Facebook for Android Friend Acceptance Vulnerability, which targets only Android Operating System.
“According to CSIRT security Advisory 0001 released on January 26, 2022, with Juice Jacking, attackers have found a new way to gain unauthorised entry into unsuspecting mobile phone users devices when they charge their mobile phones at public charging stations.
“Many public spaces, restaurants, malls and even in the public trains do offer complementary services to their customers in a bid to enhance customer services, one of which is providing charging ports or sockets.
“However, an attacker can leverage this courtesy to load a payload in the charging station or on the cables they would leave plugged in at the stations.
“Once unsuspecting persons plug their phones at the charging station or the cable left by the attacker, the payload is automatically downloaded on the victims’ phone. This payload then gives the attacker remote access to the mobile phone, allowing them to monitor data transmitted as text, or audio using the microphone. The attacker can even watch the victim in real time if the victims’ camera is not covered. The attacker is also given full access to the gallery and also to the phone’s Global Positioning System (GPS) location.
“When an attacker gains access to a user’s Mobile phone, he gets remote access to the User’s phone which leads to breach in Confidentiality, Violation of Data Integrity and bypass of Authentication Mechanisms. Symptoms of attack may include sudden spike in battery consumption, device operating slower than usual, apps taking a long time to load, and when they load they crash frequently and cause abnormal data usage.”
The NCC-CSIRT, however, proffered solutions to include using ‘charging only USB cable’ to avoid Universal Serial Bus (USB) data connection; using one’s AC charging adaptor in public space; and not granting trust to portable devices prompt for USB data connection.
“Other preventive measures against Juice Jacking include installing Antivirus and updating them to the latest definitions always; keeping mobile devices up to date with the latest patches; using one’s own power bank; keeping mobile phone off when charging in public places; as well as ensuring use of one’s own charger, if one must charge in public.
“On the other hand, the NCC-CSIRT Advisory 0001 of January 27, 2022, warns that Facebook for Android is vulnerable to a permission issue which gives privilege to anyone with physical access to the android device to accept friend requests without unlocking the phone. The products affected include Versions 329.0.0.29.120 of Android OS.
“With this, the attacker will be able to add the victim as a friend and collect personal information of the victim, such as Email, Date of Birth, Check-ins, Mobile phone number, Address, Pictures and other information that the victim may have shared, which would only be visible to his/her friends.
However, to be protected from the Facebook-associated vulnerability, NCC-CSIRT in the security advisory recommends to users to disable the feature from their device’s lock screen notification settings.
“The NCC-CSIRT was inaugurated in October, 2021 to provide guidance and direction for the constituents in dealing with issues relating to the security of critical infrastructure in their possession, and periodically assess, review and collate the threat landscape, risks, and opportunities affecting the communications sector, in order to provide advice to relevant stakeholders in those regards.
“As the telecoms-industry specific intervention, the objective of which aligns with the objective of the National Cybersecurity Policy and Strategy (NCPS) document published by the Office of the National Security Adviser (ONSA), the NCC-CSIRT ensures continuous improvement of processes and communication frameworks to guarantee secure and collaborative exchange of timely information while responding to cyber threats within the sector.
“In recent times, NCC-CSIRT has raised series of cyber-vulnerability awareness based on security advisories it receives from the Nigerian Cybersecurity Emergency Response Team (ngCERT), which is the national body for the implementation of the NCPS objective. However, Juice Jacking and Facebook for Android Friend Acceptance Vulnerabilities are the two first-ever cyber vulnerabilities published by the NCC-CSIRT,” the statement concluded
30 Responses
Howdy I am so excited I found your blog, I really found you by accident, while I was looking on Digg
for something else, Anyhow I am here now and would just like to say many thanks for a remarkable post and a all round exciting blog (I also love
the theme/design), I don’t have time to read through it all
at the minute but I have book-marked it and also added
your RSS feeds, so when I have time I will be back to
read more, Please do keep up the great work.
Feel free to visit my webpage … tracfone 2022
Hey I am so delighted I found your weblog, I really found you
by accident, while I was browsing on Digg for something else, Anyways I am here now and would just like to say many thanks for
a tremendous post and a all round interesting blog (I also love the theme/design),
I don’t have time to look over it all at the minute but I have bookmarked it and also added in your RSS feeds, so
when I have time I will be back to read a lot more, Please do
keep up the excellent job.
you’re in reality a just right webmaster. The site loading pace
is incredible. It seems that you are doing any distinctive trick.
Furthermore, The contents are masterwork. you have performed a wonderful task in this
matter!
Howdy just wanted to give you a quick heads up and let you
know a few of the pictures aren’t loading correctly.
I’m not sure why but I think its a linking issue. I’ve tried it in two different internet
browsers and both show the same outcome.
I could not refrain from commenting. Perfectly written!
Hello, everything is going well here and ofcourse every
one is sharing facts, that’s really fine, keep up writing.
Thanks for sharing your info. I truly appreciate your efforts and I am waiting
for your further post thanks once again.
Write more, thats all I have to say. Literally, it seems as
though you relied on the video to make your point. You obviously
know what youre talking about, why waste your intelligence on just posting videos
to your blog when you could be giving us something enlightening
to read?
I’m really enjoying the theme/design of your blog. Do you ever
run into any web browser compatibility issues?
A handful of my blog visitors have complained about my website not operating correctly in Explorer
but looks great in Safari. Do you have any recommendations to help fix this problem?
bookmarked!!, I really like your website!
Have you ever thought about including a little bit more than just your articles?
I mean, what you say is important and everything.
Nevertheless think about if you added some great visuals or video clips to give your posts
more, “pop”! Your content is excellent but with images and videos, this website could undeniably
be one of the most beneficial in its niche. Excellent blog!
This article is genuinely a nice one it helps
new internet people, who are wishing in favor
of blogging.
I am regular visitor, how are you everybody? This article posted at this web page
is in fact fastidious.
Hello There. I found your blog using msn. This is a really well written article.
I’ll make sure to bookmark it and return to read more of
your useful info. Thanks for the post. I’ll certainly
comeback.
You actually make it seem really easy together with your presentation but I to find this matter to be actually one thing
which I believe I would never understand. It sort of
feels too complex and extremely extensive for me.
I’m having a look forward to your subsequent submit, I’ll
attempt to get the dangle of it!
Hi! I’ve been following your web site for some time now and finally got the courage to go ahead and give you a shout out from Huffman Tx!
Just wanted to tell you keep up the excellent work!
My developer is trying to persuade me to
move to .net from PHP. I have always disliked the idea because of the expenses.
But he’s tryiong none the less. I’ve been using WordPress on numerous websites for about
a year and am worried about switching to another platform.
I have heard great things about blogengine.net.
Is there a way I can import all my wordpress posts into it?
Any kind of help would be really appreciated!
Your way of describing everything in this article is genuinely fastidious, every one can without
difficulty understand it, Thanks a lot.
Pretty nice post. I just stumbled upon your weblog
and wished to say that I have truly enjoyed surfing around your blog posts.
After all I’ll be subscribing to your feed and I hope you write again very
soon!
I every time used to study paragraph in news papers but now as I am a user of web so from now I am using net for articles, thanks to web.
I need to to thank you for this excellent read!! I definitely enjoyed every bit of it.
I have you book-marked to look at new stuff you post…
Thanks for sharing your thoughts on cheap flights.
Regards
This is very interesting, You’re a very skilled blogger.
I have joined your rss feed and look forward to seeking more of your excellent
post. Also, I’ve shared your web site in my social networks!
Wow, amazing blog layout! How long have you been blogging for?
you made blogging look easy. The overall look of your web site is great,
as well as the content!
This post will help the internet users for building up new website or
even a blog from start to end.
Hey There. I found your blog using msn. This is an extremely well written article.
I will make sure to bookmark it and come back to read more of your useful information. Thanks for the post.
I will certainly return.
I am really impressed with your writing skills as well
as with the layout on your blog. Is this a paid theme or did you customize it yourself?
Either way keep up the excellent quality writing, it’s rare to see a great blog like this one these days.
Howdy! I could have sworn I’ve been to this blog before
but after looking at a few of the posts I realized it’s
new to me. Anyhow, I’m certainly pleased I came across it and I’ll be bookmarking it and checking back regularly!
Excellent article. Keep writing such kind of information on your page.
Im really impressed by your site.
Hey there, You’ve performed an incredible job. I
will definitely digg it and individually suggest to my friends.
I am sure they’ll be benefited from this web site.
What’s up mates, its impressive article regarding teachingand fully
explained, keep it up all the time.