Your Bank Balance Will Be Stolen If This Is On Your Phone. Federal Government Disclosed

The Nigeria Computer Emergency Response Team (ngCERT), operating under the Office of the National Security Adviser, has issued a critical alert to Nigerians who use Android devices. The warning concerns a dangerous malware known as the Anatsa banking trojan, which is designed to target banking apps and steal users’ financial information. This advisory follows a series of increasing reports about cyber threats affecting bank customers across the country. ..Read Full Article

According to ngCERT, the Anatsa banking trojan exploits Android’ s accessibility services to gain complete control over infected devices. Once installed, the trojan can launch phishing attacks with fake login screens to capture banking credentials, record keystrokes, and intercept payment information. It can also remotely interact with the device, performing clicks, scrolls, and swipes, and even prevent users from accessing certain apps, including security applications.

NgCERT explains that the trojan is delivered through malicious apps that appear to be legitimate PDF and QR code readers or cleaner apps. These apps initially behave normally but then secretly download, decrypt, and execute the trojan’ s payload, bypassing the restricted settings for accessibility services, mostly in Android 13. Once the payload is executed, it establishes a connection with a command and control (C2) server, awaiting instructions from the attacker. The trojan has been distributed through various apps on the Google Play Store and has infected over 70, 000 devices to date.

4. **Monitor Banking Activity**: Regularly change banking passwords and closely monitor account activity. Report any suspicious transactions to your financial institution promptly.
In addition to the Anatsa trojan, the Nigerian Communications Commission’ s Computer Security Incident Response Team (NCC- CSIRT) has identified five malicious Google Chrome extensions that surreptitiously track online browser activities and steal users’ data. This highlights the growing need for vigilance and proactive security measures among Nigerian internet users.
The Anatsa banking trojan represents a significant threat to the financial security of Android users in Nigeria. NgCERT urges everyone to exercise caution and follow the recommended guidelines to safeguard their personal and financial information. By staying informed and vigilant, users can protect themselves from these sophisticated cyber threats and ensure their financial data remains secure.