The National Information Technology Development Agency (NITDA) has issued an advisory about a new malware threat, CovertCatch, targeting various sectors through LinkedIn.
Cybercriminals are disguising themselves as recruiters, enticing job seekers with fake employment offers that lead to malware infections. Defence, media, technology, and academia are among the sectors being targeted.
According to NITDA’s Director of Media and Corporate Communications, Mrs. Hadiza Umar, these cyber attackers trick LinkedIn users into downloading harmful files or clicking suspicious links. This allows CovertCatch to infiltrate devices undetected, stealing sensitive data, logging keystrokes, and recording screen activity.
The consequences of a CovertCatch attack are far-reaching. Victims may face financial losses, reputational damage, and large-scale data breaches.
Moreover, the malware can compromise organisational networks, potentially leading to ransomware attacks or entire system takeovers. Critical infrastructure services relying on data security are particularly vulnerable.
To safeguard against CovertCatch, NITDA recommends:
- Scrutinizing unsolicited LinkedIn job offers, especially those involving file downloads or external links
- Implementing Multi-Factor Authentication (MFA)
- Regularly monitoring account activity for unusual behaviour
- Using up-to-date antivirus software for routine scanning and anomaly detection
- Periodically auditing LinkedIn connections
- Enforcing access controls based on roles to limit exposure to sensitive data
Read also: 4 Solid Tips To Recognise And Protect Against Phishing In Nigeria
