The National Information Technology Development Agency (NITDA) has warned of a global banking malware named Grandoreiro, which it says poses a significant threat banking data through sophisticated phishing campaigns.
In an advisory released by the agency’s Computer Emergency Readiness and Response Team on Monday, December 9, the malware was described as a severe cybersecurity risk, using advanced methods such as screen overlay attacks and remote device control to steal sensitive data, including banking credentials and personal information.
The malware primarily spreads via phishing emails and fraudulent websites that deceive victims into downloading malicious software disguised as legitimate updates or documents. Once installed, Grandoreiro bypasses security protocols, granting unauthorized access to users’ devices. NITDA cautioned that this could lead to severe financial losses and identity theft for unsuspecting victims.
The agency called for vigilance and urged Nigerians to adopt robust security measures to counter such threats. It emphasized the importance of avoiding suspicious links and emails, downloading software only from credible sources, enabling multifactor authentication for financial accounts, and maintaining updated antivirus software. Additionally, NITDA advised against using public Wi-Fi for financial transactions and recommended regular monitoring of bank accounts to detect unauthorized activities.
