World
Microsoft Raises Alarm Over New Android Malware, ‘Toll Fraud’
Researchers at Microsoft have warned Android users of malware called ‘toll fraud’ that disguises as normal apps on the Google Play Store and drains the wallet of users once installed.
Microsoft describes toll fraud malware as a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent.
This type of malware is said to be one of the most prevalent types of Android malware – and it continues to evolve.
Compared to other subcategories of billing fraud, which include SMS fraud and call fraud, toll fraud has unique behaviours. Whereas SMS fraud or call fraud uses a simple attack flow to send messages or calls to a premium number, toll fraud has a complex multi-step attack flow that malware developers continue to improve.
Explaining how the malware operates, the researchers in a Microsoft blog post-https://www.microsoft.com/security/blog/2022/06/30/toll-fraud-malware-how-an-android-application-can-drain-your-wallet/, said,
”We saw new capabilities related to how this threat targets users of specific network operators. It performs its routines only if the device is subscribed to any of its target network operators. It also, by default, uses cellular connection for its activities and forces devices to connect to the mobile network even if a Wi-Fi connection is available.”
“Once the connection to a target network is confirmed, it stealthily initiates a fraudulent subscription and confirms it without the user’s consent, in some cases even intercepting the one-time password (OTP) to do so. It then suppresses SMS notifications related to the subscription to prevent the user from becoming aware of the fraudulent transaction and unsubscribing from the service,” they added.
How it gets to your phone
- This type of attack starts when a user downloads an app the malware is disguised as in the Google Play Store.
- These trojan apps will usually be listed in popular categories in the app store such as personalization (wallpaper and lock screen apps), beauty, editor, communication (messaging and chat apps), photography, and tools (like cleaner and fake antivirus apps).
- The researchers say that these apps will ask for permissions that don’t make sense for what is being done (i.e. a camera or wallpaper app asking for SMS or notification listening privileges).
Protecting yourself against the malware
Microsoft in the security alert notes that toll fraud is one of the most common malware categories with high financial loss as its main impact. Due to its sophisticated cloaking techniques, prevention from the side of the user plays a key role in keeping the device secure.
According to the researchers, a rule of thumb is to avoid installing Android applications from untrusted sources (sideloading) and always follow up with device updates. They also recommend end-users take the following steps to protect themselves from toll fraud malware:
- Install applications only from the Google Play Store or other trusted sources.
- Avoid granting SMS permissions, notification listener access, or accessibility access to any applications without a strong understanding of why the application needs it. These are powerful permissions that are not commonly needed.
- Use a solution such as Microsoft Defender for Endpoint on Android to detect malicious applications.
- If a device is no longer receiving updates, strongly consider replacing it with a new device.
World
UK former deputy PM John Prescott dies at 86
Britain’s former deputy prime minister, John Prescott, who served under Tony Blair and with him helped transform the country’s Labour party, has died at 86, his family said on Thursday.
“We are deeply saddened to inform you that our beloved husband, father and grandfather, John Prescott, passed away yesterday (Wednesday) at the age of 86,” a statement read.
Blair, the privately educated lawyer who appointed working-class Prescott to help appease the Labour left as he moved the party to the centre ground, said he was “devastated” at Prescott’s death.
“There was no one quite like him in British politics,” he told BBC radio.
Keir Starmer, who became Labour’s first prime minister since 2010 after a landslide general election win in July, called Prescott “a true giant of the Labour movement”.
“He was a staunch defender of working people and a proud trade unionist. During a decade as deputy prime minister, he was one of the key architects of a Labour government that transformed the lives of millions of people across the nation,” he added.
“So much of John’s work set the path for those of us fortunate enough to follow. From leading climate negotiations to fighting regional inequality, his legacy will live on well beyond his lifetime.”
Prescott, a former merchant seaman and trade union activist who served as a member of parliament for Hull in northern England for four decades, died “peacefully” at a care home, his wife Pauline, and two sons said.
“He did so surrounded by the love of his family and the jazz music of Marian Montgomery,” they added.
Prescott, who was appointed to the House of Lords, suffered a stroke in 2019 and had been suffering from Alzheimer’s. He stopped being a member of the upper chamber of parliament in July because of his health problems.
Plain-speaking, Prescott served for 10 years as Blair’s deputy following Labour’s landslide 1997 general election win. During a campaign stop in north Wales he punched a protester who threw an egg at him.
But he also acted as a mediator between Blair and his finance minister Gordon Brown, who also helmed the transformation of Labour in the 1990s and who had designs on power.
Prescott’s brief included the environment and transport, as well as leading negotiations for Britain for the international Kyoto Protocol on climate change.
Blair said in a 2007 letter to Prescott that he saw his role as “smoothing out colleagues and sorting out colleagues and trouble-shooting”.
“The completely unique Prescott blend of charm and brutality… got you through the decade, kept the government together and above all, gave me a lot of fun. I was lucky to have you as my deputy,” he told him.
Education
Canada now permits international students to work 24 hours
Canada has increased the permissible work hours for eligible international students during academic terms from 20 to 24 hours per week.
This adjustment aims to provide greater opportunities for students to gain work experience while maintaining their focus on academics.
Marc Miller, Canada’s Immigration, Refugees, and Citizenship Minister, stressed the intent behind this policy change, saying, “This change will give students more flexibility to manage their time and gain practical experience.”
The decision builds on remarks Miller made in October 2022 when he emphasized the importance of work experience for international students.
At the time, he stated: “With the economy growing at a faster rate than employers can hire new workers, Canada needs to look at every option so that we have the skills and workforce needed to fuel our growth.
“Immigration will be crucial to addressing our labour shortage. By allowing international students to work more while they study, we can help ease pressing needs in many sectors across the country, while providing more opportunities for international students to gain valuable Canadian work experience and continue contributing to our short-term recovery and long-term prosperity.”
Key Changes to the International Student Program
Full-Time Work During Academic Breaks
International students can now work full-time during designated academic breaks, such as summer and winter holidays. These periods allow students to increase their earnings without interfering with class schedules, bolstering their financial stability while continuing their education.
The updated regulations permit students to work up to 24 hours per week during academic terms. This increase offers greater employment opportunities while ensuring students can maintain a sustainable study schedule.
Enhanced Reporting by Institutions
Designated Educational Institutions (DLIs) are now required to submit reports twice yearly to Immigration, Refugees, and Citizenship Canada (IRCC). These reports will confirm students’ enrollment status and academic progress, ensuring compliance with study permit requirements and upholding the integrity of the International Student Program.
Approval for Institution Transfers
Under the new rules, international students must obtain approval before transferring to a different DLI. This requirement ensures adherence to permit conditions and maintains academic standards across Canada’s institutions.
Special Provisions for Quebec Students
In Quebec, eligible international students can work off-campus without a separate work permit, provided they meet specific criteria. Students must be enrolled full-time in post-secondary, vocational, or professional training programs, or vocational training at the secondary level. These courses must be at least six months long and lead to a recognized degree, diploma, or certificate.
By introducing these measures, Canada aims to enhance opportunities for international students while addressing labour shortages in key sectors, ensuring a balance between work experience and academic success.
World
Trump appoints Elon Musk to lead department of government efficiency
US President-Elect Donald Trump has appointed Elon Musk, chief executive officer (CEO) of Tesla and SpaceX, to lead a soon-to-be-established Department of Government Efficiency (DOGE).
Musk, owner of X, the microblogging platform previously known as Twitter, was an avid supporter of Trump during the electioneering leading up to the November 5 presidential election.
The former president defeated Vice-President Kamala Harris after securing more than 270 of the electoral college votes required to win the poll.
A statement on Tuesday said Musk would run DOGE alongside Vivek Ramaswamy, a politician and entrepreneur.
It said the duo “will pave the way for my Administration to dismantle Government Bureaucracy, slash excess regulations, cut wasteful expenditures, and restructure Federal Agencies Essential to the ‘Save America’ Movement’.
“I look forward to Elon and Vivek making changes to the Federal Bureaucracy with an eye on efficiency and, at the same time, making life better for all Americans,” the statement quoted the president-elect as saying.
“Importantly, we will drive out the massive waste and fraud which exists throughout our annual $6.5 Trillion Dollars of Government Spending.”
Trump will take office for a second and final term on January 25, 2025.
-
Politics1 week ago
Okpebholo fires permanent secretaries, dissolves boards
-
Business5 days ago
Lagos state government to commence upgrade of major junctions in Ikeja axis, seeks residents’ cooperation
-
Politics7 days ago
DSS operatives arrest man with bags of cash during Ondo guber
-
Celebrities7 days ago
Daddy Freeze, Akah Nnani clash over Emmanuel Iren
-
News6 days ago
Nnamdi Emeh: Suspect Facing Charges In Court, Process Independent Of Police Influence
-
World1 week ago
French newspapers sue X for using content without paying
-
News7 days ago
Alice Loksha, abducted UNICEF nurse, escapes captivity after 6 years
-
Health7 days ago
Five ways to rid your home of ants