The National Information Technology Development Agency (NITDA) raises alarm about a cybersecurity threat posed by the Grandoreiro banking malware, which targets users worldwide.
In a notice issued through its Computer Emergency Readiness and Response Team (CERRT.NG), NITDA explains that Grandoreiro is a banking Trojan that spreads through phishing emails and fake websites. The malware disguises itself as legitimate software updates or documents, tricking users into downloading it.
After installation, Grandoreiro uses advanced tactics like screen overlays and remote device control to steal sensitive data, including banking credentials.
Risks Linked to Grandoreiro
NITDA outlines the major risks associated with the malware:
- Unauthorized access to banking accounts.
- Theft of personal and financial information.
- Remote exploitation of devices to bypass security controls.
- Financial losses for individuals and businesses.
Steps to Stay Protected
To reduce the risks, NITDA advises users to:
- Avoid phishing traps: Do not click on links or open attachments from unknown or unsolicited emails.
- Download securely: Get software updates and documents only from trusted sources.
- Enable Multifactor Authentication (MFA): Add extra security to online banking accounts.
- Use antivirus software: Regularly update and scan devices with antivirus and anti-malware tools.
- Secure financial transactions: Avoid public Wi-Fi for sensitive activities and consider using a VPN.
- Monitor account activity: Review banking statements regularly to detect and report suspicious transactions.
Users can report suspicious activities or seek help through CERRT.NG via email at cerrt@nitda.gov.ng, phone +2348178774580, or the website www.cerrt.ng.
Spotify Users Face Cybersecurity Risks
NITDA also alerts the public about cybercriminals using Spotify playlists and podcast descriptions to promote harmful content. These threats include game hacks, pirated software, and spam links, which expose users to phishing attacks and malware.
To stay safe, Spotify users are advised to:
- Avoid suspicious playlists or podcasts.
- Refrain from clicking unknown links.
- Update the Spotify app regularly.
NITDA emphasizes the importance of vigilance and following cybersecurity best practices to protect personal information and devices.