The Nigerian Communications Commission (NCC) has announced the discovery of a new Android malware, known as ‘AbstractEmu.’
According to Dr. Ikechukwu Adinde, the Commission’s chief spokesman in a statement today, November 9, the malware can gain access to smartphones, take complete control of infected smartphones and silently modify device settings while simultaneously taking steps to evade detection.
He said that the discovery was announced recently by the Nigerian Computer Emergency Response Team (ngCERT), the national agency established by the Federal Government to manage the risks of cyber threats in the Nigeria, which also coordinates incident response and mitigation strategies to proactively prevent cyber-attacks against Nigeria
Adinde said that AbstractEmu has been found to be distributed via Google Play Store and third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known marketplaces like Aptoide and APKPure.
The advisory stated that a total of 19 Android applications that posed as utility apps and system tools like password managers, money managers, app launchers, and data saving apps have been reported to contain the rooting functionality of the malware.
“The apps are said to have been prominently distributed via third-party stores such as the Amazon Appstore and the Samsung Galaxy Store, as well as other lesser-known marketplaces like Aptoide and APKPure. “The apps include All Passwords, Anti-ads Browser, Data Saver, Lite Launcher, My Phone, Night Light and Phone Plus, among others.
“According to the report, rooting malware although rare, is very dangerous. By using the rooting process to gain privileged access to the Android operating system, the threat actor can silently grant itself dangerous permissions or install additional malware – steps that would normally require user interaction. Elevated privileges also give the malware access to other apps’ sensitive data, something not possible under normal circumstances.
“The ngCERT advisory also captured the consequences of making their devices susceptible to AbstractEmu attack. Once installed, the attack chain is designed to leverage one of five exploits for older Android security flaws that would allow it to gain root permissions. It also takes over the device, installs additional malware, extracts sensitive data, and transmits to a remote attack-controlled server.
“Additionally, the malware can modify the phone settings to give app ability to reset the device password, or lock the device, through device admin; draw over other windows; install other packages; access accessibility services; ignore battery optimisation; monitor notifications; capture screenshots; record device screen; disable Google Play Protect; as well as modify permissions that grant access to contacts, call logs, Short Messaging Service (SMS), Geographic Positioning System (GPS), camera, and microphone.
“The ngCERT also asserts in the advisory that, while the malicious apps were removed from Google Play Store, the other app stores are likely distributing them. Consequently, the NCC wishes to reiterate a two-fold ngCERT advisory in order to mitigate the risks. The two-fold advisory include:
1. Users should be wary of installing unknown or unusual apps, and look out for different behaviours as they use their phones.
2. Reset your phone to factory settings when there is suspicion of unusual behaviours in your phone.
“The NCC, in exercise of its mandate and obligation to the consumers, will continue to sensitise and educate telecoms consumers on any cyber threat capable of inflicting low or high-impact harms on their devices, whether discovered through the ngCERT or the telecom sector’s Centre for Computer Security Incident Response managed by the Commission.”
It will be recalled that the NCC, in October 2021, alerted telecom consumers of the existence of new, high-risk and extremely-damaging, Android device-targeting Malware called Flubot and outlined steps to prevent the eir devices from being attacked by the virus.

The Nigerian Communications Commission (NCC) has awarded N20 million grant to four Nigerian tech startups towards encouraging development of indigenous technologies and contents.
The four tech startups, according to the Commission’s chief information strategist, Dr. Ikechukwu Adinde, in a statement today, November 8, are: Clearflow System Hub, Aelaus Engineering Teams/Hyech Electronics Solutions, Kalibotics, and CyberNorth Tech.
The statement said that the lucky ones emerged winners of Virtual NCC Internet of Things (IoT) Code Camp and Hackathon 2021, and received N5 million each on their innovative technology solutions aimed at making life better for Nigerians.
It said that while Clearflow System Hub and Aelaus Engineering Teams/Hyech Electronics Solutions emerged winners on IoT category on kidnapping and banditry, Kalibotics and CyberNorth Tech, emerged winners on assistive robotics for effective e-waste management solutions.
It said that the grant is for the novel digital solutions of four startups, aimed at finding innovative digital solutions in addressing the challenges of insecurity and to stem the growth in national e-waste rates, while advancing the frontier of Internet of Things (IoT) in Nigeria.
The statement quoted the Commission’s Director of New Media and Information Security, Dr. Haru Al-Hassan as saying at the prize-giving ceremony, held at the Commission’s headquarters, in Abuja, that the Commission is a frontline driver of innovation in Information and Communications Technology (ICT).
Dr. Al-Hassan, who stood in for the Executive Vice Chairman of the NCC, Professor Umar Danvatta, said that the organized event was aimed at driving the creation of problem-solving tech innovations.
Professor Danbatta said that the initiative is in line with the objectives of the Nigerian Economic Sustainability Plan (NESP) 2020, NCC’s Strategic Vision Plan (SVP) 2021-2025, Executive Order 5 of 2017, and Section 1 (f) of the Nigerian Communications Act (NCA), 2003 which focuses on promotion of Nigerian content in contracts, science, engineering and technology.
The Executive Vice Chairman said that the occasion also symbolises the NCC’s commitment to deliver objectives of pillars 4, 7 and 8 of the National Digital Economy Policy and Strategy (NDEPS) 2020-2030, and the aspirations of the Commission’s SVP 2021-2025 in promoting innovative services and maintaining effective partnership and collaborations with relevant stakeholders.
This was even as the Executive Commissioner, Technical Services, Ubale Maska, who was represented by Head, Research and Development, Kelechi Nwankwo, said that the event demonstrated the critical role that the telecommunications sector plays in addressing Nigeria’s social and environmental problems with innovative solutions. He reiterated the Commission’s commitment towards continuously supporting innovations for nation building.
He stressed the determination of the Commission towards harnessing the potentials of Nigerian youth in addressing emerging challenges through ICT, adding that the event boldly demonstrates Commission’s resolve to champion the efforts of government to leverage telecommunications-based solutions to address societal issues that need urgent attention.
Representatives of agencies in the security governance sector, telecommunications operators, National Financial Intelligence Unit (NFIU) and Ministries, Departments and Agencies (MDAs) that attended the event lauded the NCC for the meaningful initiative.