The National Information Technology Development Agency (NITDA) has alerted the public to a new malware threat called CovertCatch, which cybercriminals are using to target LinkedIn users in fields such as defense, media, technology, and academia.
These cyber attackers pose as recruiters, enticing LinkedIn job seekers with fake employment offers that result in malware infections. NITDA’s Director of Media and Corporate Communications, Mrs. Hadiza Umar, explained that these fraudulent offers lead unsuspecting users to download harmful files or click on deceptive links, allowing CovertCatch to silently infect their devices.
Once installed, the malware can steal sensitive information, monitor keystrokes, and record screen activities without being detected, which poses serious security risks. The effects of CovertCatch can be far-reaching, potentially causing financial losses, reputational damage, and large-scale data breaches.
NITDA warns that CovertCatch has the capability to infiltrate beyond personal devices, spreading across organizational networks and raising the risk of broader attacks, such as ransomware incidents or complete system takeovers. This makes critical sectors, where data security is paramount, particularly vulnerable.
To counter this threat, NITDA has outlined essential security steps for individuals and organizations. LinkedIn users are advised to scrutinize unsolicited job offers, especially those involving downloads or external links. The agency also stresses the importance of Multi-Factor Authentication (MFA) and regular monitoring for unusual account activity.
Additional recommendations include keeping antivirus software up to date and conducting routine scans for malicious activity. NITDA further suggests that organizations periodically review LinkedIn connections and apply role-based access controls to minimize exposure to sensitive data. These preventive measures aim to limit the impact of CovertCatch and safeguard digital security on a broader scale.
