NITDA warns Nigerians against malicious websites imitating Google Play Store

The National Information Technology Development Agency (NITDA) has warned Nigerians about the Playpraetor Trojan, a new cybercrime attack on websites that imitates the Google Play Store.

The phishing campaign enables data theft and various financial fraud.

According to a tweet by NITDA, Cybercriminals use fraudulent websites designed to mimic the Google Play Store by luring victims into downloading malicious applications. The fake links are spread via various social engineering strategies such as scam advertisements, SMS messages, and phishing emails.

NITDA noted that the advisory stems from a detailed report by the Computer Emergency Readiness and Response Team Nigeria (CERNT.NG), a division under the agency. The fraudulent process allows attackers to gain unauthorized access to the victim’s phone and explore vital information, thereby exposing their details.

“Once the fake Play Store app is installed, the PlayPraetor Trojan grants attackers unauthorized access to the victim’s device, enabling data theft, credential harvesting, financial fraud, remote control, and other malware deployment,” NITDA said.

Also Read: NITDA issues urgent warning to website owners against Jupiter X Core WordPress plugin.

Get familiar with Playpraetor Trojan

The Playpraetor Trojan (named after the authoritative Roman praetor) is a malware that infects computer systems and mobile devices, allowing Cybercrime actors to gain unauthorized access and control. Once installed, the Trojan can steal sensitive information, such as login credentials, financial data, and personal files.

It can also create backdoors, enabling cybercrime actors to access and manipulate the infected system.

The Playpraetor Trojan spreads through phishing emails, malicious downloads, or infected software. When a user clicks on a malicious link or downloads a compromised file, the Trojan is installed on their device without their knowledge. The malware can then collect and transmit sensitive data to the hacker’s command and control server.

One of the most concerning aspects of the Playpraetor Trojan is its ability to evade detection by traditional antivirus software. The malware uses advanced techniques, such as code and anti-debugging, to conceal its presence and avoid being detected.

This makes it challenging for users to detect and remove and allowing it to remain on the system for an extended period.

Another is that these apps mimic trusted brands, using similar names and icons to avoid detection. Once installed, they request access to Accessibility Services, allowing them to monitor keystrokes, capture screen content, and even steal cryptocurrency wallet addresses without the victim’s knowledge.

NITDA’s tips on protecting your devices against Playpraetor Trojan

In response to the threat, NITDA outlined actionable steps for Nigerians to safeguard their devices.

1. Download from trusted sources: Ensure you download apps from the official Google Play Store or trusted sources to reduce the risk of installing malware or other types of threats. Avoid downloading apps from third-party websites or unverified sources, as they may contain hidden malware or viruses.
2. Verify app developers: Verifying app developers and reading reviews helps you make informed decisions about the apps you install. Check for legitimate developers and be wary of apps with low ratings, few reviews, or suspiciously glowing reviews.
3. Regularly update devices: Keeping your devices and apps updated helps maintain their security and performance. Enable automatic updates or regularly check for updates to ensure your devices and apps have the latest security enhancements.
4. Use reputable security solutions: The use of security solutions provides an additional layer of protection against malware, viruses, and other threats. Look for security solutions from well-known providers that offer features like anti-malware protection and anti-phishing capabilities.

Additionally, using strong passwords, enabling two-factor authentication, and regularly backing up your data can help minimize the impact of a Trojan infection.

Staying vigilant and taking proactive steps helps reduce the risk of falling victim to the Playpraetor Trojan and other types of malware.