…Warns of vulnerability to new Android trojan apps
The Nigerian Communications Commission (NCC) wishes to alert telecom consumers and members of the public on an ongoing cyber-vulnerability that allows a nearby hacker to unlock vehicles, start their engines wirelessly and make away with the cars.
The fact that car remotes are categorized short range devices that make use of radio frequency (RF) to lock and unlock cars informed the need for the Commission to alert the general public on this emergent danger, where hackers take advantage to unlock and start a compromised car.
According to the latest advisory released by the Computer Security Incident Response Team (CSIRT), the Cybersecurity Centre for the telecom sector established by the NCC, the vulnerability is a Man-in-the-Middle (MitM) attack or, more specifically, a replay attack in which an attacker intercepts the RF signals normally sent from a remote key fob to the car, manipulates these signals, and re-sends them later to unlock the car at will.
With this latest type of cyber-attack, it is also possible to manipulate the captured commands and re-transmit them to achieve a different outcome altogether. “Multiple researchers disclosed a vulnerability, which is said to be used by a nearby attacker to unlock some Honda and Acura car models and start their engines wirelessly. The attack consists of a threat actor capturing the radio frequency (RF) signals sent from your key fob to the car and resending these signals to take control of your car’s remote keyless entry system,” the advisory stated emphatically.
However, the NCC-CSIRT, in the advisory, has offer some precautionary measures or solutions that can be adopted by car owners to prevent falling victim to the attack.
According to the cyber-alert unit of the Commission, “When affected, the only mitigation is to reset your key fob at the dealership. Besides, the affected car manufacturer may provide a security mechanism that generate fresh codes for each authentication request, this makes it difficult for an attacker to ‘replay’ the codes thereafter. Additionally, vulnerable car users should store their key fobs in signal-blocking ’Faraday pouches’ when not in use.”
Importantly, car owners in the stated categories are advised to choose Passive Keyless Entry (PKE) as opposed to Remote Keyless Entry (RKE), which would make it harder for an attacker to read the signal due to the fact that criminals would need to be at close proximity to carry out their nefarious acts.
The PKE is an automotive security system that operates automatically when the user is in proximity to the vehicle, unlocking the door on approach or when the door handle is pulled, and also locking it when the user walks away or touches the car on exit. The RKE system, on the other hand, represents the standard solution for conveniently locking and unlocking a vehicle’s doors and luggage compartment by remote control.
Additionally, in a related advisory, the NCC, based on another detection by CSIRT, wishes to inform the general public about the resurgence of Joker Trojan-Infected Android Apps on Google Play Store. This arose due to the activities of criminals who intentionally download legitimate apps from the Play Store, modify them by embedding the Trojan malware and then uploading the app back to the Play Store with a new name.
The malicious payload is only activated once the apps goes live on the Play Store, which enables the apps to scale through Google’s strict evaluation process. Once installed, these apps request for permissions that once granted, enable the apps to have access to critical functions such as text messages and notifications.
As a consequence, a compromised device will subscribe unwitting users to premium services, billing them for services that do not exist. A device like this can also be used to commit Short Messaging Service (SMS) fraud while the owner is unaware.
It can click on online ads automatically and even use SMS One Time password (OTPs) to secretly approve payments. Without checking bank statements, the user will be unaware that he or she has subscribed to an online service. Other actions, such as stealing text messages, contacts, and other device data, are also possible.
To avoid falling victim to the manipulation of hackers deploying Joker Trojan-Infected Android Apps, Android users have been advised to avoid downloading unnecessary apps or installing apps from unofficial sources. The NCC also wishes to advise telecom consumers to ensure that apps installed from the Google Play Store are heavily scrutinized by reading reviews, assessing the developers, perusing the terms of use and only granting the necessary permissions.
Conclusively, the NCC recommends that unauthorised transactions be checked against any installed app. Indeed, any apps not in use should be deleted while users are also advised to ensure that a device is always patched and updated to the latest software.
Very interesting information!Perfect just what I was searching for!
Great beat ! I wish to apprentice at the same time as you amend your web site, how can i subscribe for a weblog site? The account aided me a appropriate deal. I have been a little bit familiar of this your broadcast offered shiny clear concept
It’s actually a cool and useful piece of info. I am glad that you shared this helpful info with us. Please stay us informed like this. Thank you for sharing.
I have been absent for some time, but now I remember why I used to love this website. Thank you, I will try and check back more frequently. How frequently you update your web site?
Very interesting points you have remarked, thanks for posting.
Hi there, I discovered your site via Google at the same time as looking for a related subject, your web site got here up, it seems to be good. I have bookmarked it in my google bookmarks.
I am impressed with this web site, rattling I am a fan.
I don’t usually comment but I gotta tell appreciate it for the post on this special one : D.
Hi! Quick question that’s totally off topic. Do you know how to make your site mobile friendly? My website looks weird when browsing from my iphone 4. I’m trying to find a theme or plugin that might be able to correct this problem. If you have any suggestions, please share. With thanks!
I am very happy to read this. This is the type of manual that needs to be given and not the random misinformation that’s at the other blogs. Appreciate your sharing this greatest doc.
Hello, Neat post. There is an issue together with your site in internet explorer, may test thisK IE nonetheless is the marketplace leader and a huge part of people will omit your excellent writing due to this problem.
Wow! Thank you! I always needed to write on my site something like that. Can I take a fragment of your post to my website?
You are my inhalation, I own few blogs and sometimes run out from post :). “The soul that is within me no man can degrade.” by Frederick Douglas.
Very interesting points you have remarked, appreciate it for posting. “I love acting. It is so much more real than life.” by Oscar Wilde.
I am incessantly thought about this, appreciate it for putting up.
I’ve been exploring for a bit for any high quality articles or blog posts on this kind of area . Exploring in Yahoo I at last stumbled upon this website. Reading this information So i’m happy to convey that I have an incredibly good uncanny feeling I discovered exactly what I needed. I most certainly will make sure to do not forget this site and give it a glance on a constant basis.
I wanted to thank you for this great read!! I definitely enjoying every little bit of it I have you bookmarked to check out new stuff you post…
You have mentioned very interesting points! ps decent website . “‘Tis a sharp medicine, but it will cure all that ails you. — last words before his beheadding” by Sir Walter Raleigh.
My partner and I absolutely love your blog and find almost all of your post’s to be precisely what I’m looking for. Would you offer guest writers to write content in your case? I wouldn’t mind composing a post or elaborating on a lot of the subjects you write regarding here. Again, awesome weblog!
Some really excellent information, Sword lily I found this. “Use your imagination not to scare yourself to death but to inspire yourself to life.” by Adele Brookman.
Hi, Neat post. There’s a problem with your site in internet explorer, would check this… IE still is the market leader and a huge portion of people will miss your fantastic writing due to this problem.
I like the valuable information you provide in your articles. I will bookmark your blog and check again here regularly. I’m quite certain I’ll learn plenty of new stuff right here! Best of luck for the next!
I think other web-site proprietors should take this website as an model, very clean and magnificent user friendly style and design, let alone the content. You’re an expert in this topic!
Helpful information. Lucky me I found your website by accident, and I am surprised why this twist of fate did not happened in advance! I bookmarked it.
Hello, Neat post. There is an issue with your site in internet explorer, might test this… IE nonetheless is the market chief and a good element of people will omit your magnificent writing due to this problem.
Hi , I do believe this is an excellent blog. I stumbled upon it on Yahoo , i will come back once again. Money and freedom is the best way to change, may you be rich and help other people.
I really like your writing style, fantastic info, appreciate it for posting :D. “Your central self is totally untouched By grief, confusion, desperation.” by Vernon Howard.
Simply want to say your article is as astonishing. The clarity on your submit is simply spectacular and that i can assume you’re knowledgeable in this subject. Well along with your permission allow me to grasp your feed to keep updated with approaching post. Thanks one million and please carry on the gratifying work.
excellent post, very informative. I wonder why the other specialists of this sector don’t notice this. You must continue your writing. I’m sure, you’ve a great readers’ base already!
Deference to website author, some great entropy.
вилла аннигора алушта
гостиницы лысково нижегородской области
гостиница чернигов в брянске
ялта интурист карта отеля
санатории крыма рейтинг лучших с лечением 2021
самбия зеленоградск
антик гостиница
milan hotel moscow
санатория родник пятигорск
дубки санаторий ундоры цены 2021
вольгинский бассейн цены
андерсен отель спб
цены в беларуси на сегодня
санаторий в сочи цены
лучшие санатории по лечению позвоночника
пансионат подмосковье
рейтинг санаториев тюменской области
гостиницы перми цены
введенский отель спб
отель цветы пермь
Hey, you used to write excellent, but the last few posts have been kinda boring?K I miss your tremendous writings. Past several posts are just a bit out of track! come on!
I like what you guys are up too. Such smart work and reporting! Carry on the superb works guys I have incorporated you guys to my blogroll. I think it’ll improve the value of my website 🙂