Telecom
New Android Trojan Hijacks Facebook Accounts
A previously unseen Android Trojan dubbed FlyTrap has targeted at least 140 countries since March this year, spreading to more than 10 000 victims via social media hijacking, third-party app stores, and sideloaded applications.
This was revealed by Zimperium’s zLabs mobile threat research teams, who recently found several previously undetected applications using the company’s z9 malware engine and on-device detection.
After a forensic investigation, the researchers ascertained that FlyTrap is part of a family of Trojans that use social engineering to compromise Facebook accounts. They also believe that bad actors out of Vietnam are running the campaign.
Initially, these Trojans were distributed through both Google Play and third-party application stores. Zimperium zLabs reported the findings to Google, who verified the provided research and removed the malware from the Google Play store.
Unfortunately, they are still available on third-party, unsecured app repositories, highlighting the risk of sideloaded applications to mobile endpoints and user data. Sideloading is the process of downloading and installing apps onto a mobile device from an unofficial source.
What it does
FlyTrap poses a threat to the victim’s social identity by hijacking their Facebook accounts via the Trojan that infects their Android device. The information collected from the victim’s Android device includes Facebook ID, location, e-mail, IP address, and cookies and tokens associated with the accounts in question.
Hijacked Facebook sessions can be used to spread the malware by abusing the target’s social credibility through personal messaging containing links to the Trojan, as well as propagating propaganda or disinformation campaigns using the victim’s geolocation details.
According to the researchers, these social engineering techniques are very effective in today’s digital world and are often employed by attackers to spread malware.
How it works
The malefactors employed a variety of themes they believed users would find appealing such as free Netflix coupon codes, Google AdWords coupon codes, and voting for the best football (soccer) team or player.
At first available through Google Play and third-party stores, the application fooled users into downloading and trusting the application using high-quality designs and social engineering.
Following installation, FlyTrap displays pages that engage the user and elicit a response from them. “The engagement continues until the user is shown the Facebook login page and asks to log in to their account to cast their vote or collect the coupon code or credits,” the researchers say.
However, this is all yet another trick to mislead the user since no voting or coupon code is generated. Instead, the final screen attempts to justify the fake code by displaying a message claiming the “Coupon expired after redemption and before spending.”
The researchers say that although the popular belief is that a phishing page is always at the vanguard of compromising or hijacking an account, there are other ways to hijack sessions, such as by logging into the original and legitimate domain.
This Trojan exploits one such technique known as JavaScript injection. “Using this technique, the application opens the legit URL inside a WebView configured with the ability to inject JavaScript code and extracts all the necessary information such as cookies, user account details, location, and IP address by injecting malicious JS code.”
Exploiting misconceptions
Bad actors often leverage common user misconceptions that logging into the correct domain is always secure regardless of the application being used to log in. “The targeted domains are popular social media platforms and this campaign has been exceptionally effective in harvesting social media session data of users from 144 countries.”
In addition, these accounts can be employed as a botnet for a variety of purposes, including boosting the popularity of pages, sites or products, to spreading misinformation or political propaganda.
Much like any user manipulation, the high-quality graphics and official-looking login screens are popular schemes to trick users into taking action that could reveal sensitive information.
Ongoing threats against mobile devices
According to the researchers, FlyTrap is simply another example of the ongoing, active threats against mobile devices that aim to steal credentials.
“Mobile endpoints are often treasure troves of unprotected login information to social media accounts, banking applications, enterprise tools, and more. The tools and techniques used by FlyTrap are not novel but are effective due to the lack of advanced mobile endpoint security on these devices.”
The company advises to be vigilant for any red flags which might indicate a phone has been hacked or infected with mobile malware, including a battery that runs out too quickly, relentless pop-ups, or strange applications that the user hasn’t downloaded.
In addition, any degradation of performance, or airtime and other cellular charges that make no sense are something to be wary of.
Protecting devices
Zimperium’s zLabs advises users to protect themselves and their devices by only downloading apps or updating apps via official app stores, and never clicking on a WhatsApp or SMS link that attempts to trick the user into updating an app, downloading an app or installing anything.
The company also advises to be aware of mobile phishing, and links to sites that are trying to steal personal information, such as username and passwords. Also, it says to never root or jailbreak a device as this negates the built-in security, and advises to install a good anti-malware app.
Finally, be selective about what is downloaded. Anyone who suspects their device is infected should attempt to remove the suspicious app. They could attempt to go back in time and restore the device as a new device from a previous backup or if it’s still persistent they may need to do a full reset.
MTN Nigeria has alerted the public to a fraudulent 25GB anniversary data offer currently circulating across social media and messaging platforms.
In an official advisory published on its support handle on X at the weekend, the telco warned customers against interacting with unverified links, sharing private credentials, or making payments to access the supposed anniversary promotion.
According to MTN, the official 25GB anniversary freebie is only accessible via the MTN eShop and the MyMTN NG App.
In the post, the company said, “Please beware of fake MTN 25th Anniversary 25GB giveaway offers circulating online.
“The official MTN 25GB Anniversary Giveaway is available ONLY via the MyMTN NG App and MTN eShop.
“Do not click on links, share your personal information or make payments on any other platform claiming to offer the giveaway.
“Only trust official MTN channels.”
In a different post, the provider explained how eligible subscribers could access the legitimate MTN data giveaway.
The company said, “Log in to the MyMTN App and tap ‘Redeem Now’ on the anniversary banner or via the MTN eShop.
“To access the 25GB offer, kindly visit the MyMTN App or the MTN E-Shop and follow the prompts to activate the bundle, if you are eligible for the offer.
“You may also click on the link contained in the SMS notification you received regarding the offer.”
To safely claim the reward, the telecom operator advised subscribers to rely strictly on details published through its official communication channels.
MTN added that the complimentary 25GB data allocation remains valid until 11:59 p.m. on the designated expiration date, urging eligible customers to redeem the package before it expires.
The warning follows a wave of viral posts and link-sharing schemes falsely offering free data under the guise of the company’s 25th-anniversary celebration.
Consequently, users are strongly cautioned against engaging with unauthorized platforms or providing sensitive personal information and fees to third-party sites claiming to offer the promotional data.
Nigeria is strengthening its position as a leading digital economy in Africa as it prepares to host the second edition of GITEX Nigeria, against projections that the continent’s artificial intelligence (AI) economy could generate up to $1 trillion in economic value by 2035.
GITEX Nigeria
GITEX Nigeria, described as West Africa’s largest technology, AI and startup event, is scheduled to hold in Abuja and Lagos from Aug. 31 to Sept. 3, under the patronage of President Bola Tinubu.
The event is supported by the Federal Ministry of Communications, Innovation and Digital Economy in collaboration with the National Information Technology Development Agency (NITDA), endorsed by the Lagos State Government and organised by KAOUN International.
With the theme, “Beyond Connectivity: The Bridge to Sovereign Innovation,” the 2026 edition is expected to bring together global technology companies, investors, policymakers, regulators, startups and other stakeholders to advance Nigeria’s digital transformation agenda.
According to the organisers, the event will focus on strengthening digital resilience, scaling AI infrastructure, attracting strategic investments and building partnerships to support digital sovereignty across Nigeria and West Africa.
Nigeria’s progress in digital skills development is expected to feature prominently at the event, with the Federal Government’s 3 Million Technical Talent (3MTT) programme highlighted as a major intervention.
The programme has recorded 1.87 million registrations across all 774 local government areas, while more than 135,000 Nigerians have been trained through three cohorts.
The programme has also extended learning opportunities to more than 300,000 people through community resources and created 15,000 job and opportunity pathways, according to figures released by the organisers.
Another key initiative, Project BRIDGE, is aimed at expanding Nigeria’s national ICT backbone and improving connectivity in underserved communities.
The project is expected to create up to 20,000 direct jobs and more than 150,000 indirect jobs, train 5,000 Nigerian youths, raise internet penetration above 70 per cent and extend high-speed connectivity to millions of households, businesses, schools and hospitality establishments.
Dr Bosun Tijani, Minister of Communications, Innovation and Digital Economy, said Nigeria’s objective was to build the foundations for digital sovereignty and a globally competitive AI-powered economy.
“Building on the momentum forged through the implementation of Project BRIDGE, our national blueprint for expanding digital infrastructure and connecting communities across Nigeria, our aspiration ahead of this year’s edition is clear: to solidify the foundations Africa needs for digital sovereignty, technological self-determination, and a globally competitive AI-powered economy,” Tijani said.
He said Nigeria was seeking to promote equitable access, accelerate cross-continental progress and position the country as a producer and exporter of digital technologies and AI solutions.
The GITEX Nigeria Government Leadership and AI Summit will open in Abuja on Aug. 31, bringing together ministers, governors and regulators to discuss digital public infrastructure and other issues shaping West Africa’s digital economy.
The GITEX Nigeria Tech Expo and Future Economy Conference, as well as the Startup Festival, will also return for the second consecutive year.
A new component, FDX Nigeria by GITEX, will focus on finance and digital asset exchange, with the organisers describing it as a platform designed to promote financial inclusion and connect emerging technology with global capital.
Gov. Babajide Sanwo-Olu of Lagos State said the state remained central to Africa’s digital transformation, noting its role in attracting talent, capital and innovation.
He said hosting GITEX Nigeria would further support Lagos’ ambition of becoming a smarter, more connected and globally competitive economy.
Kashifu Inuwa Abdullahi, Director-General of NITDA, said Nigeria’s digital future would depend not only on technology adoption but also on resilience, trust and effective governance frameworks.
“GITEX NIGERIA seamlessly complements this mandate, creating a unique environment for the dialogue needed to accelerate responsible AI adoption, develop a secure digital economy, and unlock new opportunities for innovation and economic growth,” Abdullahi said.
He said the expertise, investment and partnerships generated through the event would contribute to building an AI ecosystem that was secure, inclusive and capable of supporting Nigeria and West Africa’s long-term competitiveness.
The organisers said Nigeria’s National AI Strategy, 3MTT programme and Project BRIDGE were among initiatives strengthening the country’s capacity in talent development, digital infrastructure, investment attraction and responsible AI adoption.
They said GITEX Nigeria would provide an avenue for global stakeholders to establish partnerships and develop solutions capable of accelerating the region’s digital transformation.
Trixie LohMirmand, CEO of GITEX, said the event was intended to demonstrate that West Africa was ready to convert technological ambition into economic growth, resilience and global competitiveness.
She said GITEX Nigeria would facilitate strategic conversations and partnerships aimed at strengthening regional competitiveness and unlocking scalable growth across Nigeria and West Africa.
Nigerian Communications Commission (NCC) and the Enugu State Government have signed an agreement for the operational lease of the NCC Digital Industrial Park and NCC Learning Centre in Enugu.
The agreement was witnessed by Dr Aminu Maida, Executive Vice Chairman and Chief Executive Officer of the NCC, alongside members of the Commission’s Board and Management.
The development is expected to strengthen digital innovation, skills development and technology-driven opportunities in the state.
As part of the engagement, the NCC delegation also visited the Enugu Smart School Initiative, where technology is being integrated into teaching and learning.
The initiative is aimed at equipping young Nigerians with relevant digital skills and preparing them for future opportunities in an increasingly technology-driven economy.
The NCC said it remained committed to supporting initiatives that expand digital inclusion, strengthen innovation and develop the talent required to drive Nigeria’s digital transformation.
The Commission said partnerships with state governments and other stakeholders were critical to creating an enabling environment for digital skills development and technology adoption across the country.
Fake Agency: ICPC Indicts NITDA, Others over Inadequate Due Diligence
Tax Reform Built on Taxing Prosperity, Not Poverty– Adedeji
UNESCO Taps Oguamanam,Nigerian Scholar to Advisory Body on Science, Tech Ethics
MTN Alerts Subscribers over Fake 25GB Anniversary MTN Data Giveaway
X Replaces Revenue Sharing wit New Creator Rewards Programme
EFCC Busts NIS Visa Overstay Racket, Uncovers N700m in an Account
Fact-Check: Elon Musk’s “Tesla Pi Phone” is Internet Rumor
NBC Tasks Broadcasting Stations over 2028 DSO Global Deadline
NBC Scraps Annual Digital Access Fee on DSO
Glo Sponsored African Voices to Feature Netflix’s “The Polygamist” Stars
General News2 days agoGuinness Rewards Consumers with ₦17 Million in First Week of ‘Open for More’ Promo Draw
News3 days agoGlovo Pioneers AI Quick-Commerce
News2 days agoWorld Bank Debars United Aviation Services, Owner over Fraudulent Activities
E-Business2 days agoNITDA Introduces Cloud Certification Boost Data Localisation Compliance
Telecom2 days agoNCC, Enugu Sign Deal to Operate Digital Industrial Park, Learning Centre
News2 days agoEnugu State Approves Land for ITF’s Digital Fabrication Centre
E-Financial2 days agoBOI Opens N250Bn Bond Offer to Fund Businesses
Telecom2 days agoGITEX Nigeria to spotlight Africa’s $1trn AI economic potential