Telecom
New Android Trojan Hijacks Facebook Accounts
A previously unseen Android Trojan dubbed FlyTrap has targeted at least 140 countries since March this year, spreading to more than 10 000 victims via social media hijacking, third-party app stores, and sideloaded applications.
This was revealed by Zimperium’s zLabs mobile threat research teams, who recently found several previously undetected applications using the company’s z9 malware engine and on-device detection.
After a forensic investigation, the researchers ascertained that FlyTrap is part of a family of Trojans that use social engineering to compromise Facebook accounts. They also believe that bad actors out of Vietnam are running the campaign.
Initially, these Trojans were distributed through both Google Play and third-party application stores. Zimperium zLabs reported the findings to Google, who verified the provided research and removed the malware from the Google Play store.
Unfortunately, they are still available on third-party, unsecured app repositories, highlighting the risk of sideloaded applications to mobile endpoints and user data. Sideloading is the process of downloading and installing apps onto a mobile device from an unofficial source.
What it does
FlyTrap poses a threat to the victim’s social identity by hijacking their Facebook accounts via the Trojan that infects their Android device. The information collected from the victim’s Android device includes Facebook ID, location, e-mail, IP address, and cookies and tokens associated with the accounts in question.
Hijacked Facebook sessions can be used to spread the malware by abusing the target’s social credibility through personal messaging containing links to the Trojan, as well as propagating propaganda or disinformation campaigns using the victim’s geolocation details.
According to the researchers, these social engineering techniques are very effective in today’s digital world and are often employed by attackers to spread malware.
How it works
The malefactors employed a variety of themes they believed users would find appealing such as free Netflix coupon codes, Google AdWords coupon codes, and voting for the best football (soccer) team or player.
At first available through Google Play and third-party stores, the application fooled users into downloading and trusting the application using high-quality designs and social engineering.
Following installation, FlyTrap displays pages that engage the user and elicit a response from them. “The engagement continues until the user is shown the Facebook login page and asks to log in to their account to cast their vote or collect the coupon code or credits,” the researchers say.
However, this is all yet another trick to mislead the user since no voting or coupon code is generated. Instead, the final screen attempts to justify the fake code by displaying a message claiming the “Coupon expired after redemption and before spending.”
The researchers say that although the popular belief is that a phishing page is always at the vanguard of compromising or hijacking an account, there are other ways to hijack sessions, such as by logging into the original and legitimate domain.
This Trojan exploits one such technique known as JavaScript injection. “Using this technique, the application opens the legit URL inside a WebView configured with the ability to inject JavaScript code and extracts all the necessary information such as cookies, user account details, location, and IP address by injecting malicious JS code.”
Exploiting misconceptions
Bad actors often leverage common user misconceptions that logging into the correct domain is always secure regardless of the application being used to log in. “The targeted domains are popular social media platforms and this campaign has been exceptionally effective in harvesting social media session data of users from 144 countries.”
In addition, these accounts can be employed as a botnet for a variety of purposes, including boosting the popularity of pages, sites or products, to spreading misinformation or political propaganda.
Much like any user manipulation, the high-quality graphics and official-looking login screens are popular schemes to trick users into taking action that could reveal sensitive information.
Ongoing threats against mobile devices
According to the researchers, FlyTrap is simply another example of the ongoing, active threats against mobile devices that aim to steal credentials.
“Mobile endpoints are often treasure troves of unprotected login information to social media accounts, banking applications, enterprise tools, and more. The tools and techniques used by FlyTrap are not novel but are effective due to the lack of advanced mobile endpoint security on these devices.”
The company advises to be vigilant for any red flags which might indicate a phone has been hacked or infected with mobile malware, including a battery that runs out too quickly, relentless pop-ups, or strange applications that the user hasn’t downloaded.
In addition, any degradation of performance, or airtime and other cellular charges that make no sense are something to be wary of.
Protecting devices
Zimperium’s zLabs advises users to protect themselves and their devices by only downloading apps or updating apps via official app stores, and never clicking on a WhatsApp or SMS link that attempts to trick the user into updating an app, downloading an app or installing anything.
The company also advises to be aware of mobile phishing, and links to sites that are trying to steal personal information, such as username and passwords. Also, it says to never root or jailbreak a device as this negates the built-in security, and advises to install a good anti-malware app.
Finally, be selective about what is downloaded. Anyone who suspects their device is infected should attempt to remove the suspicious app. They could attempt to go back in time and restore the device as a new device from a previous backup or if it’s still persistent they may need to do a full reset.
Elon Musk’s X (formerly Twitter) has launched a new stand-alone messaging app on iOS devices, called XChat.
Elon Musk
This app will help users connect their existing X contacts for calling, chatting, and sharing files. This move shows how Musk’s previous idea of creating a single ‘everything app’ seems to shift to a different strategy now.
This newly launched app comes with features such as audio and video calling, text messaging, group chats, and file sharing.
Moreover, it features privacy-focused tools like disappearing messages, the option to delete and edit messages for everyone, and a feature that blocks screenshots.
Looking at these features, the XChat seems to take on WhatsApp and Messenger.
However, the tech firm said that the app has no tracking or ads.
In terms of privacy, X claimed that the instant messaging app is end-to-end encrypted and comes with a PIN.
This app is currently available to iOS users only, and more updates are expected in the near future, as teased by Benji Taylor, the X’s lead designer. The launch of this app reflects a shift in Musk’s strategy about turning X into an ‘everything’ app that will include payments, shopping, messaging, and more combined in one place.
However, the focus of xAI seems to be different now as the company seems to be developing several different apps instead of combining everything into one.
This approach may help X to reach users through their various services rather than a single platform.
While XChat focused on messaging currently, the tech firm is also reportedly testing a separate payments system, which is not available to the public so far.
More features and updates to the instant messaging app are likely to be arriving in the coming months as X continues to grow its ecosystem with more apps.
Technology Company, Globacom has unveiled two vibrant television commercials, “Road Trip” and “Department of Imagination,” reinforcing the telecommunications giant’s dedication to providing seamless, reliable connectivity for every lifestyle.
These engaging campaigns illustrate how Glo remains an essential partner in both our daily routines and our boldest future aspirations.
“Road Trip” captures a relatable family adventure filled with laughter and authentic moments. The story follows Toyin Abraham Ajeyemi as she experiences the frustration of poor signal—only to find that switching to Glo transforms the experience instantly. Whether it’s navigation, downloading content, or staying entertained, the difference is clear with Glo, which ensures you stay connected no matter where the road takes you.
Starring alongside Toyin Abraham Ajeyemi, the commercial featured Bolaji Ogunmola and others and their combination brought the best out of the TVC.
Users can easily access data plans by dialling *312#, ensuring smooth, uninterrupted service on the go.
Department, on the other hand transports viewers to a futuristic landscape where technology bridges the gap between creativity and reality.
Guided by the renowned Richard Mofe-Damijo (The Professor), the story explores how powerful ideas turn into extraordinary experiences. It showcases a smarter, more dynamic world—from real-time gaming to advanced culinary processes demonstrated by Hilda Baci and creative tech integration by Bamike Adenibuyan (Bam-Bam).
The unique feature of the story is each scene serving as a testament to how Glo is actively shaping a future where technological possibilities are infinite.
The Glo’s latest commercials carry a unified, powerful message: The future is here, and it is powered by Glo.
Young innovators and entrepreneurs from across Nigeria converged at the “Gathering on 100,” a 100-hour non-stop youth-focused experience powered by MTN, to showcase ideas, build networks, and compete for funding in a major startup pitch competition.
Pitchathon
The event, described by organisers as a convergence of creators, founders, and culture shapers, featured a Pitchathon segment that awarded a total of ₦45 million to eight outstanding startups selected from 30 participants spanning sectors such as Artificial Intelligence, FinTech, HealthTech, EdTech, Internet of Things (IoT), AgriTech, DefenceTech, and CreativeTech.
The competition underscored what participants called a “Gen Z approach to business,” combining innovation, speed, and community-driven growth models.
At the end of the contest, Hurpham Africa, led by Sesan Kareem, emerged overall winner, securing ₦15 million alongside enterprise partnership and co-development access from MTN.
Coconoto Ltd, founded by Jacob Oluwayannife, clinched the second runner-up position with a prize of ₦10 million, while Rava Send, represented by Emmanuel Isaka, emerged third runner-up, receiving ₦5 million.
Five other startups — URI Social, Dulces Jams, Kindly Book, Africa Medical Marketplace, and MyFund — each received ₦3 million in recognition of their innovative solutions and growth potential.
Organisers said the initiative was designed not only to reward innovation but also to equip young founders with critical business skills through mentorship and real-time engagement with industry leaders.
The Pitchathon formed part of a broader industry showcase where emerging technology startups presented solutions aimed at deepening financial inclusion and accelerating e-commerce growth across Africa.
Among the presenters was a fintech platform led by Charles Dairo, which is focused on simplifying cross-border transactions. According to Dairo, the platform has recorded more than 10,000 user registrations, with about 30 per cent actively transacting.
He said the company is deploying a localized incentive system to drive user engagement and convert inactive users, noting that a referral programme already contributes roughly 15 per cent of organic growth.
The platform operates a 0.5 per cent transaction fee model and leverages strategic banking partnerships to ensure liquidity. It also integrates stablecoins such as USD Coin to enhance cross-border payment efficiency and expand interoperability across mobile money ecosystems.
Stakeholders noted that such innovations could help address long-standing challenges in Africa’s payments landscape, including high transaction costs and limited system integration.
In the e-commerce space, startups like Jakuta demonstrated the use of artificial intelligence to simplify purchasing decisions and improve operational efficiency.
The platform combines voice technology with mobile messaging tools such as WhatsApp to guide users through transactions, while also enabling device trade-ins through automated video analysis.
Developers said the system currently supports operations in about 20 countries and is capable of handling high volumes of daily interactions, including automated customer engagement processes.
They added that the solution automates routine merchant tasks such as inventory management and customer follow-ups, even in low-connectivity environments, thereby expanding access for small and medium-sized enterprises.
Founders also disclosed ongoing efforts to partner with telecommunications providers to reduce communication costs and scale adoption of their platforms.
Industry analysts at the event observed that many startups are increasingly prioritising customer lifetime value, reinvesting revenues into marketing, user acquisition, and product optimisation to build resilient and scalable business models.
They noted that such strategies are essential for navigating challenges including exchange rate volatility, infrastructure gaps, and regulatory complexities across African markets.
The “Gathering on 100” highlighted the growing influence of youth-led innovation in shaping Nigeria’s digital economy, with stakeholders expressing optimism that sustained collaboration between startups, financial institutions, and telecom operators would accelerate digital inclusion and unlock new economic opportunities.
Buhari, SSG’s Signatures Forged to Defraud Nigeria of $6.2m in CBN – EFCC
EFCC Declares Tejuosho, City Boys Movement’s Women Leader Wanted over “419”
Angst as FG Drops $32.8m Fine on Meta for Data Breach
Afreximbank to Fund 3 New Refineries in Nigeria
CSCS Targets Market Leadership Through Technology, Diversified Revenue
FG to Gift Nigerians over 100 Free TV Channels from May 15
Microsoft Revamps Copilot in Workplace AI Push
Dangote Refinery Debunks Speculations on IPO
What Adekunle Gold’s Support Means for ‘The Gathering on 100
NRS Takes Over Mineral Royalties Collection Under New Tax Laws
Telecom1 day agoElon Musk Launches XChat with Video Calling to Take on WhatsApp, Messenger
Telecom1 day agoMTN-Backed Pitchathon Awards ₦45m to Startups @‘Gathering on 100’ in Lagos
Telecom1 day agoHow NITDA Is Transforming Corps Members into Digital Millionaires
Telecom1 day agoGlobacom Unveils Two New TVCs Showcasing the Future of Connectivity
E-Financial1 day agoSystemically Weak Banks Put Nigeria’s $1Trillion Ambition at Risk
News1 day agoBOI MD, Olasupo Olusi, Charts Tech-Driven Path to Growth for Nigeria
Broadcasting1 day agoSERAP, NGE Sue NBC over Threat to Sanction Broadcasters
E-Financial1 day agoCRMI Backs CBN’s New Measures to Curb Fraud