CERRT.Ng Alerts on Risks of Banking Apps from Trojan

Computer Emergency Readiness and Response Team (CERRT) of the National Information Technology Development Agency (NITDA), has clarified that the new Nexus Android banking trojan is designed to operate stealthily, with the ability to hide from detection and evade security measures.

A staggering variety of different banking and financial apps are susceptible to attack by this Trojan. The malware is being distributed through phishing pages disguised as legitimate websites called YouTube Vanced.

However, preventive measures are hereunder:

• Avoid clicking on ads or unverified links.
• Avoid visiting or downloading apps from unauthorized websites.
• Ensure to install Antivirus software on device.

Impact

The trojan can intercept and steal sensitive data, including login credentials, credit card information, and other financial information, once it has been installed on your device. Additionally, it has the ability to intercept codes from the Google Authenticator app as well as two-factor authentication messages delivered by text. The banking malware can also delete text messages that have been received on an infected device and periodically update itself by pinging a command-and-control server that is under the control of cybercriminals.

For further enquiries, please contact CERRT.NG through the following Channels: cerrt@nitda.gov.ng  +2348178774580 www.cerrt.ng