TikTok ‘Invisible Challenge’ exposes your phones to data-stealing malware, NCC warns Nigerians

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has cautioned citizens against participating in the viral ‘Invisible Challenge’ on TikTok.

The viral challenge involves users filming themselves naked and using TikTok’s ‘Invisible Body’ filter to replace their body with a blurry background.

In an advisory issued by Reuben Muoka, its spokesperson, on Tuesday, the NCC said the challenge puts users’ devices at risk of information-stealing malware known as the WASP (or W4SP) stealer.

It is believed that WASP steals victims’ passwords, credit card details, discord accounts, and personal files and sends them to a threat actor.

“The Invisible Challenge involves wrapping a somewhat transparent body contouring filter around a presumed naked individual. Attackers are uploading videos to TikTok with a link to software that they claim can reverse the filter’s effects,” the statement reads.

“Those who click on the link and attempt to download the software, known as ‘unfilter,’ are infected with the WASP stealer. Suspended accounts had amassed over a million views after initially posting the videos with a link. Following, the link leads to the ‘Space Unfilter’ Discord server, which had 32,000 members at its peak but has since been removed by its creators.

“Successful installation will allow the malware to harvest keystrokes, screenshots, network activity, and other information from devices where it is installed. It may also covertly monitor user behaviour and harvest Personally Identifiable Information, including names and passwords, keystrokes from emails, chat programs, websites visited, and financial activity.

“This malware may be capable of covertly collecting screenshots, video recordings, or the ability to activate any connected camera or microphone.”

The NCC said TikTok users can prevent such an attack through various measures which include not clicking on suspicious links and installing anti-malware software on their devices.