The National Information Technology Development Agency (NITDA) has raised an alarm about a new cyber threat targeting Nigerians. Dubbed the “PlayPraetor Trojan,” this malware is being distributed through fake websites designed to mimic the Google Play Store, tricking unsuspecting users into downloading harmful applications. In a statement shared on Twitter, NITDA revealed that cybercriminals are using deceptive tactics like phishing emails, scam SMS messages, and fraudulent online ads to lure victims. Once the malicious app is installed, the Trojan grants attackers unauthorized access to the victim’s device, enabling them to steal sensitive data, such as login credentials and financial details. The malware can also deploy other harmful software, monitor keystrokes, and even hijack cryptocurrency wallets, all without the user’s knowledge. The PlayPraetor Trojan spreads through links embedded in phishing campaigns. When users click on these links or download compromised files, the malware silently installs itself on their devices. It then uses advanced techniques to evade detection by antivirus programs, making it difficult for users to notice or remove it. One of its most alarming features is its ability to impersonate trusted apps by mimicking their names and icons. Once installed, these fake apps request access to Accessibility Services, giving hackers control over critical functions like screen monitoring and data capture. NITDA’s Recommendations for Staying SafeTo protect against this growing threat, NITDA has advised Nigerians to take the following precautions: Download Apps from Trusted Sources: Only download apps from the official Google Play Store or verified platforms. Avoid third-party websites or untrusted sources that may host malicious software. Verify App Developers: Always check the developer’s credentials and read user reviews before installing any app. Be cautious of apps with few or overly positive reviews that seem suspicious. Keep Devices Updated: Regularly update your device’s operating system and apps to ensure you have the latest security patches. Use Reputable Security Software: Install reliable antivirus or anti-malware programs from trusted providers to add an extra layer of protection against threats like Trojans and phishing attempts. Enable Two-Factor Authentication (2FA): Strengthen your account security by enabling 2FA wherever possible. Additionally, NITDA recommends using strong passwords and backing up important data regularly to minimize potential losses in case of an attack. Cybersecurity threats like the PlayPraetor Trojan highlight the increasing sophistication of cybercriminals and their ability to exploit technology users’ trust in legitimate platforms like Google Play Store. By staying vigilant and following best practices for online safety, Nigerians can better protect themselves from falling victim to such malicious schemes.

Software expert Moses Buba has recommended Nigerians adopt passphrases over traditional passwords for better online security. Speaking in Abuja during an interview with the News Agency of Nigeria (NAN), Buba emphasized that conventional passwords are increasingly vulnerable to hacking attempts. Passphrases, which consist of multiple words or sentences, are longer and harder for hackers or bots to crack. Unlike traditional passwords, they are easier to remember and provide stronger protection for sensitive data. Examples of passphrases include “MyVillagePeopleCantCatchMe2025” and “TrafficOnThirdMainlandIsReal.” “Passwords are easy to crack and not strong enough to provide comprehensive internet security,” Buba stated. He urged users to adopt passphrases to safeguard their online activities, including banking, social media, and e-commerce platforms. Nigeria faces one of the highest rates of cyber-attacks in Africa, with organizations experiencing an average of 3,759 attacks weekly, double the global average. The financial sector is particularly affected, recording 4,718 incidents per week due to outdated infrastructure and weak multi-factor authentication systems. Government institutions and schools are also frequent targets, facing ransomware and phishing schemes regularly. Buba expressed concern over the growing number of Nigerians falling victim to cybercrime due to poor password habits. “Stories of hacked accounts are becoming more common because many internet users rely on weak passwords,” he said. He stressed the importance of adopting passphrases as a simple yet effective measure against cyber threats, urging Nigerians to prioritize their online safety.