Telecom
New Android Trojan Hijacks Facebook Accounts
A previously unseen Android Trojan dubbed FlyTrap has targeted at least 140 countries since March this year, spreading to more than 10 000 victims via social media hijacking, third-party app stores, and sideloaded applications.
This was revealed by Zimperium’s zLabs mobile threat research teams, who recently found several previously undetected applications using the company’s z9 malware engine and on-device detection.
After a forensic investigation, the researchers ascertained that FlyTrap is part of a family of Trojans that use social engineering to compromise Facebook accounts. They also believe that bad actors out of Vietnam are running the campaign.
Initially, these Trojans were distributed through both Google Play and third-party application stores. Zimperium zLabs reported the findings to Google, who verified the provided research and removed the malware from the Google Play store.
Unfortunately, they are still available on third-party, unsecured app repositories, highlighting the risk of sideloaded applications to mobile endpoints and user data. Sideloading is the process of downloading and installing apps onto a mobile device from an unofficial source.
What it does
FlyTrap poses a threat to the victim’s social identity by hijacking their Facebook accounts via the Trojan that infects their Android device. The information collected from the victim’s Android device includes Facebook ID, location, e-mail, IP address, and cookies and tokens associated with the accounts in question.
Hijacked Facebook sessions can be used to spread the malware by abusing the target’s social credibility through personal messaging containing links to the Trojan, as well as propagating propaganda or disinformation campaigns using the victim’s geolocation details.
According to the researchers, these social engineering techniques are very effective in today’s digital world and are often employed by attackers to spread malware.
How it works
The malefactors employed a variety of themes they believed users would find appealing such as free Netflix coupon codes, Google AdWords coupon codes, and voting for the best football (soccer) team or player.
At first available through Google Play and third-party stores, the application fooled users into downloading and trusting the application using high-quality designs and social engineering.
Following installation, FlyTrap displays pages that engage the user and elicit a response from them. “The engagement continues until the user is shown the Facebook login page and asks to log in to their account to cast their vote or collect the coupon code or credits,” the researchers say.
However, this is all yet another trick to mislead the user since no voting or coupon code is generated. Instead, the final screen attempts to justify the fake code by displaying a message claiming the “Coupon expired after redemption and before spending.”
The researchers say that although the popular belief is that a phishing page is always at the vanguard of compromising or hijacking an account, there are other ways to hijack sessions, such as by logging into the original and legitimate domain.
This Trojan exploits one such technique known as JavaScript injection. “Using this technique, the application opens the legit URL inside a WebView configured with the ability to inject JavaScript code and extracts all the necessary information such as cookies, user account details, location, and IP address by injecting malicious JS code.”
Exploiting misconceptions
Bad actors often leverage common user misconceptions that logging into the correct domain is always secure regardless of the application being used to log in. “The targeted domains are popular social media platforms and this campaign has been exceptionally effective in harvesting social media session data of users from 144 countries.”
In addition, these accounts can be employed as a botnet for a variety of purposes, including boosting the popularity of pages, sites or products, to spreading misinformation or political propaganda.
Much like any user manipulation, the high-quality graphics and official-looking login screens are popular schemes to trick users into taking action that could reveal sensitive information.
Ongoing threats against mobile devices
According to the researchers, FlyTrap is simply another example of the ongoing, active threats against mobile devices that aim to steal credentials.
“Mobile endpoints are often treasure troves of unprotected login information to social media accounts, banking applications, enterprise tools, and more. The tools and techniques used by FlyTrap are not novel but are effective due to the lack of advanced mobile endpoint security on these devices.”
The company advises to be vigilant for any red flags which might indicate a phone has been hacked or infected with mobile malware, including a battery that runs out too quickly, relentless pop-ups, or strange applications that the user hasn’t downloaded.
In addition, any degradation of performance, or airtime and other cellular charges that make no sense are something to be wary of.
Protecting devices
Zimperium’s zLabs advises users to protect themselves and their devices by only downloading apps or updating apps via official app stores, and never clicking on a WhatsApp or SMS link that attempts to trick the user into updating an app, downloading an app or installing anything.
The company also advises to be aware of mobile phishing, and links to sites that are trying to steal personal information, such as username and passwords. Also, it says to never root or jailbreak a device as this negates the built-in security, and advises to install a good anti-malware app.
Finally, be selective about what is downloaded. Anyone who suspects their device is infected should attempt to remove the suspicious app. They could attempt to go back in time and restore the device as a new device from a previous backup or if it’s still persistent they may need to do a full reset.
Lebara Nigeria has officially stepped into Nigeria’s bustling telecom market with the introduction of its unique 0724 number series—a bold move that promises fresh competition and a more transparent user experience.
Leveraging its status as a Tier 5 Mobile Virtual Network Operator (MVNO), the company is positioning itself not just as another telecom player but as a catalyst for change, offering innovative packages built on fairness and clarity.
From day one, Lebara Nigeria has been ready to compete with industry giants like MTN, Airtel, Globacom, and 9mobile, having secured full interconnectivity with all of them.
This critical footprint ensures that its voice and data services are accessible and of high quality nationwide.
Akin Adesokan, Lebara’s chief operating officer, highlighted the company’s strategic intent: “Our readiness with the 0724 series and full interconnect setup underscores our unwavering commitment to seamless integration, customer freedom, and market inclusivity.” Indeed, the company has taken considerable steps to ensure regulatory compliance and operational strength, leveraging its global expertise as an MVNO and its freshly minted licence under the NCC’s highest tier.
What truly differentiates Lebara’s offering is its unconventional pricing model. Eschewing traditional prepaid airtime, it sells voice bundles and data packages that align with real usage, not ambiguous credit deductions. “You buy minutes, not airtime. If your call ends in 30 seconds, you still have 99 minutes and 30 seconds left. That’s the kind of clarity and control we are bringing to Nigerian telecoms,” explained Samuel Alabi, head of Corporate Communications.
This clarity responds to a long-standing frustration among Nigerians, where ₦100 airtime often disappears quickly and opaquely. Lebara’s minutes-based system offers predictability and transparency—a refreshing contrast in a market hungry for accountability.
Lebara’s entrance is more than a marketing exercise; it’s a strategic diversification of Nigeria’s mobile ecosystem.
With over 220 million active mobile lines, Nigeria is Africa’s biggest telecom consumer.
The NCC’s move to licence 41 MVNOs, including Lebara, illustrates a policy shift aimed at introducing more competition and improving service quality. Technically agile and digitally native, Lebara leverages existing network infrastructure, augmented by automated systems—a lean operation compared to the capital-intensive MNO model.
he status quo. With strategic execution and continued regulatory support, this could mark the beginning of a new chapter: one where Nigerians no longer need to ask, “Can you hear me now?” but instead say, “Yes—and I know exactly what it cost.”
As the 20th Global Internet Governance Forum (IGF) opens in Lillestrøm, Norway, leading pan-African social enterprise Paradigm Initiative (PIN) is championing grassroots voices in global digital policy discussions.
Running from June 23–27 under the theme “Building Digital Governance Together,” the IGF unites stakeholders from civil society, governments, the private sector, and technical communities to tackle pressing digital issues such as access, AI ethics, surveillance, and content moderation.
The discussions also contribute to the upcoming World Summit on the Information Society (WSIS)+20 review in December 2025.
PIN’s participation comes at a time when digital governance decisions are increasingly shaping the future of billions. “It is essential that grassroots solutions are heard,” said ‘Gbenga Sesan, Executive Director of PIN. “At PIN, we believe that meaningful digital inclusion requires more than just connectivity.
“It demands inclusive, progressive and sustainable policies and frameworks built taking the realities of grassroots stakeholders into consideration.”
Representing PIN at IGF 2025 are Sesan, Chief Operating Officer Nnenna Paul-Ugochukwu, and Senior Manager for Partnerships and Engagements Thobekile Matimbe. They will engage in strategic sessions on topics like connectivity in excluded communities, AI accountability in content moderation, and human rights in emerging tech.
The team will also participate in coordination meetings with partners including Meta, UNESCO, the Freedom Online Coalition, and GPD.
PIN’s presence at the forum underscores its ongoing mission to embed digital rights within grassroots realities and to ensure that global internet governance frameworks are inclusive, accountable, and responsive to the needs of marginalised communities.
Information and Communications Technologies (ICT) stakeholders have applauded the latest in bookshelf by Remmy Nweke, the Village Priest, which was presented at the recently concluded Nigeria DigitalSENSE Africa Forum on Internet Governance for Development (IG4D) in Lagos.
The presentation and review of the book, “The Village Priest” by Ogbuefi Remmy Nweke, largely described as a powerful narrative explored the intersection of tradition and innovation in rural Igboland, received widespread acclaim, with its themes resonating deeply with the event’s focus on ‘Global Digital Compact: Opportunities for Multi-stakeholders in Nigeria.’
The highly anticipated review was delivered by Mr. ‘Gbenga Sesan, Executive Director of Paradigm Initiative (PIN), a renowned social entrepreneur and advocate for digital rights and inclusion in Africa.
Sesan lauded Nweke’s prose fiction for its insightful portrayal of “innovative technology adaptation transforming rural communities,” describing it as “a careful work of cultural documentation, offering not just a story but a chronicle—a record of transition that many rural and even urban African communities continue to live through.”
Sesan’s review highlighted the book’s central character, Ogboo AniEze, the revered chief priest of Ilimefo, whose life is dedicated to preserving his village’s customs. The narrative unfolds as “the village and its people, their traditional practices and strong cultural heritage at the crossroads!” with the arrival of GSM technology—a “strange and mysterious piece of technology” that initially challenges Ogboo AniEze’s traditional views.
The review detailed the chief priest’s journey of reconciliation, from initial fear of GSM eroding cultural heritage to a profound understanding that the technology “also offered opportunities for growth, development, and connection with the wider world.” This transformation leads to a new era of harmony in Ilimefo, where “tradition and modernity coexisted in balance.” The book beautifully illustrates how mobile phones become “a powerful tool for preserving the village’s cultural heritage” and how interfaith collaboration, particularly with Catholic priest Fada Ekie, fosters a “fusion of traditions” and a “new spiritual identity.”
“It teaches us, without preaching,” Sesan concluded, “that true innovation is not in abandoning our roots, but in strengthening them with new tools.”
This year’s Nigeria DigitalSENSE Forum, was presided over by Dr. Jimson Olufuye, former President of the Information Technology (Industry) Association of Nigeria and a member of the UN Secretary-General’s IGF Multistakeholder Advisory Group (MAG), served as a crucial platform for discussing the future of digital governance.
Olufuye also commended the author, Nweke for his perseverance in serving the ICT industry as well as endearing documentation of the sector.
For the Managing Director, Internet Exchange Point of Nigeria, Mr. Muhammed Rudman, the latest book by Nweke depicts the gift of in depth creativity and urged him on, despite the challenges the sectorial environment throws at industry players.
Organized by ITREALMS Media and hosted under DigitalSENSE Africa (DSA), an At-Large Structure certified by ICANN, the forum brought together key partners including the Nigerian Communications Commission (NCC), Internet Exchange Point of Nigeria, Internet Society Nigeria chapter, Association of Licensed Telecoms Operators of Nigeria (ALTON), and ICANN.
The NDSF series, running since 2009, continues to “motivate public discourse and create awareness on the technological cum business benefits of rapidly advancing technologies capable of impacting on Internet Governance, Internet Protocol (IP) addresses and domain name industry, access and affordability,” while offering a vital platform for industry networking.
The event not only celebrated the literary achievement of Ogbuefi Remmy Nweke, a multiple award-winning journalist, but also reinforced the commitment of ICT stakeholders to fostering digital inclusion and innovation across Nigeria.
Lebara, New Operator Enters Nigerian Telecom Arena, Sells Minutes, Not Airtime
EFCC Drags Cititrust to Court over Unreported ₦200mTransfers
ARCON to Tackle Digital, Recommits to Ethical Standards
Africa Gears Up For Digital Sovereignty At 13th Edition Of Digital Africa Conference 2025
Over 7m Streaming Accounts’ Credentials were Leaked in 2024 – Report
Telecom1 day agoMTN Says New N6.98 USSD Charge Won’t Affect Airtime Recharge
Telecom1 day agoNnaemeka Ani Calls on African Techies to Rewrite the Narrative
General News1 day agoStudy Reveals 7% of Industrial Organizations Tackle Vulnerabilities Only When Necessary
E-Financial1 day agoSofri Rejigs Digital Platforms for Better Customer Experience
General News1 day agoNITDA, NCFRMI Forge Strategic Alliance for Inclusive Digital Transformation of Displaced Nigerians
Telecom1 day agoCrypto Scam Unmasked: U.S. Recovers Record $225m in Global Fraud Bust
E-Financial1 day agoDLM Group Unveils Innovative Sovereign Bond Backed Composite Notes
E-Financial10 hours agoS&P Global Ratings Downgrades Ecobank Nigeria’s Credit Rating to CCC-, Outlook Negative