NITDA warns Nigerians over AI-driven DeepLoad malware threat

The National Information Technology Development Agency (NITDA) has issued a fresh cybersecurity alert warning Nigerians about a new and rapidly evolving threat known as DeepLoad, an AI-powered malware currently targeting individuals, businesses, and government institutions across the country.

In an advisory released through its Computer Emergency Readiness and Response Team (CERRT.NG), the agency said DeepLoad represents a new generation of cyber threats that uses artificial intelligence to bypass traditional security systems and steal sensitive data without being easily detected.

According to NITDA, the malware is primarily spread through social engineering attacks, in which victims are tricked into interacting with fake website error messages. These prompts often instruct users to copy and execute malicious commands on their devices, unknowingly activating the malware. Once installed, DeepLoad quietly embeds itself into the system and begins harvesting sensitive information such as saved passwords, banking credentials, and browser data. It also uses AI-driven techniques to evade antivirus detection, making it harder to identify and remove.

A key concern highlighted by the agency is the malware’s persistence mechanism. Even after users believe it has been removed, DeepLoad can reactivate itself days later through hidden system functions, allowing attackers to maintain long-term access to compromised devices.

NITDA warned that the impact of a successful attack could be severe, including financial fraud, identity theft, and operational disruptions for organisations. Government systems and critical infrastructure could also be at risk if compromised.

To mitigate the threat, the agency advised Nigerians not to paste commands from unknown websites, avoid suspicious software downloads via USB devices, and enable two-factor authentication on important accounts. Organisations were also urged to strengthen internal cybersecurity awareness and monitor systems for unusual activity.

The alert reflects growing concern over increasingly sophisticated cyberattacks in Nigeria, especially as criminals adopt AI-driven tools to scale and refine their operations. NITDA emphasized that proactive cyber hygiene remains the strongest defense against such emerging threats.