The Nigeria Computer Emergency Response Team (ngCERT) has issued a warning about a new wave of Android malware known as Tria Stealer, which is currently targeting users in Nigeria.
This trojan spreads through fake links, often disguised as wedding or event invites, which trick users into downloading malicious APK files. Once installed, the malware gains access to sensitive information, including WhatsApp and Telegram conversations, as well as SMS messages.
The malware is capable of hijacking accounts, exploiting stolen credentials, impersonating users, and executing financial fraud with ease. Even two-factor authentication may not be enough to prevent this if sensitive access has already been granted. This type of threat has evolved over the years, but Tria Stealer is particularly concerning because it not only steals data but also uses it to carry out malicious activities. Messages can be intercepted, and access credentials can be harvested without the victim’s knowledge.
ngCERT has issued a high-risk alert over this threat, warning of potential consequences such as account takeover, impersonation, financial fraud, and identity theft. If a phone is compromised, the consequences can be catastrophic, including vulnerability of financial apps, damage to reputation through impersonation, and exploitation of personal messages for scams.
To protect themselves, users should take several precautions. They should only download apps from the official Play Store, be suspicious of random invites or links, even from people they know, and enable two-factor authentication for all sensitive accounts. Additionally, users should install reputable antivirus software and keep it updated. Organizations should also take steps to raise awareness, monitor mobile devices, and prevent employees from clicking on unverified links.
ngCERT’s guidance emphasizes the importance of being proactive in preventing this type of threat. By deploying network monitoring for suspicious outbound connections to known command and control domains, organizations can help prevent the malware from communicating with its command center. Given the potential severity of this threat, it’s essential to take action now rather than waiting to see if it affects you. By the time you realize it, it may already be too late.
Read Also: NCC Unveils World-Class ICT Park At UI To Boost Innovation