A dangerous Android malware is spreading across Nigeria — here’s all you need to know

Imagine getting a WhatsApp invite to a wedding from someone you trust. You tap to view it. Seconds later, you’ve unknowingly handed over your SMS inbox, banking apps, and even your OTPs to a malware you can’t see and can’t delete.

That’s how the Tria Stealer malware works. And the Nigeria Computer Emergency Response Team (ngCERT) says it’s already spreading across the country via Telegram and WhatsApp for Android users.

It shows up as a fake event invite, tricks you into downloading a malicious Android Package Kit (APK) file, then installs itself like a system app to avoid detection. From there, it harvests your messages, intercepts your OTPs, accesses your bank apps, and even impersonates you to scam your contacts.

CHART: Africa’s Cybersecurity Risk is Fast-Growing

The bigger question is whether Africa’s digital economy can outpace its vulnerabilities—or if the gap will only widen.

TechloyKelechi Edeh

ngCERT says the malware is so persistent it automatically reactivates after every reboot and it’s smart enough to hide from most antivirus software. They also add that both individuals and organizations are at risk, and even tech-savvy users could get caught, especially since the malware can impersonate trusted contacts.

To stay safe, the agency recommends that you:

• Avoid downloading apps from outside the Google Play Store
• Enable two-factor authentication (2FA)
• Limit app permissions
• Use reputable antivirus tools

And for organizations, it’s urging stricter mobile device policies and real-time monitoring for suspicious activity.

This warning comes just as Check Point’s Global Threat Index ranked Nigeria 11th among the most cyberattacked countries in the world, ahead of Kenya and Ghana. The most targeted sectors they say are the government, telecoms, and education.

Overall, mobile threats like Tria Stealer are part of a growing wave of attacks in Africa using more sophisticated methods, often powered by AI. But with this one, it’s not just about malware anymore. It’s about how trust is being weaponized and how quickly a single tap can unravel your digital life.

MTN Cyber Breach Raises Data Security Concerns Across African Telecom Sector

The incident reflects the growing digital threats facing global telecoms.

TechloyOyinebiladou Omemu