The National Information Technology Development Agency (NITDA) has issued a warning to Nigerians about a new phishing attack that exploits Microsoft file recovery tools.
Phishing is a form of cyberattack in which fraudsters employ misleading tactics to deceive people into disclosing sensitive data, such as passwords, credit card information, or personal identification numbers.
According to NITDA, this sophisticated technique uses damaged files that appear broken to antivirus programs, allowing them to bypass security measures. “When users try to open them, their computer’s recovery tools fix the files, unknowingly activating hidden malicious content. The attackers rely on curiosity or enticing offers to lure users into taking action, putting their security at risk,” the government tech agency warns.

NITDA says that cyber attackers often rely on users’ curiosity or tempting offers to trick them into opening the files, putting their digital security at significant risk. Once activated, the malware can compromise sensitive data, including passwords, financial information, and personal details. Victims could face identity theft, financial fraud, and other distressing consequences.
Preventive measures against phishing
NITDA advises Nigerians to follow these precautions to protect themselves:
1. Be cautious with unexpected emails, particularly those offering rewards or making urgent requests.
2. Avoid opening corrupt or suspicious files from unknown sources.
3. Refrain from clicking on links embedded in unsolicited emails or documents.
4. Use advanced email filters to block malicious attachments.
By following these steps, NITDA believes individuals can better safeguard themselves from this growing cyber threat. The agency says that it continues to prioritise the digital security of Nigerians, and urges everyone to remain vigilant.