According to an NCC-CSIRT advisory, threat actors have used the Invisible Challenge, a popular TikTok challenge, to spread the WASP (or W4SP stealer) malware, which steals information.
The WASP stealer is a persistent malware host on Discord that its inventor claimed was undetectable and had a high possibility of causing severe damage.
The warning stated, "The Invisible Challenge is surrounding a supposedly naked person with a body contouring filter that is slightly transparent. Attackers are posting movies to TikTok with a link to a piece of software they claim will undo the effects of the filter.
“The WASP stealer is spread to those who click the link and try to download the programme known as "unfilter." Over a million views on suspended accounts were accumulated after the videos were first posted with a link. The "Space Unfilter" Discord server can be reached by clicking the link; it once had 32,000 users, but its developers have since deleted it. If the virus is successfully installed, it will be able to gather data from the devices it is placed on, including keystrokes, screenshots, network activity, and other information. Additionally, it might stealthily keep track of user activities and gather Personally Identifiable Information (PII), such as usernames and passwords, keystrokes from emails and chat applications, websites visited, and financial activity. This malware may have the potential to secretly take screenshots, record videos, or turn on any attached camera or microphone, according to the statement.
According to the team, avoiding clicking on suspicious links, using anti-malware software on your devices, checking your app tray and removing any apps you don't remember installing or that are dormant, and adopting good password hygiene practises like using a password manager are some ways to thwart such an attack.
The NCC established the CSIRT as the telecom industry's cyber security incident centre to focus on occurrences that may have an impact on telecom users and the general public.
The Federal Government formed the Nigerian Computer Emergency Response Team (ngCERT) to lower the frequency of future computer risk incidents by planning, safeguarding, and securing Nigerian cyberspace to prevent assaults, difficulties, or related events. The CSIRT also collaborates with ngCERT.