AI-powered DeepLoad malware targets Nigerian institutions
Nigeria's information technology agency warned of AI-powered malware called DeepLoad actively targeting government agencies, financial institutions, and individuals. The malware spreads through fake website error prompts, steals credentials and sensitive data, and uses artificial intelligence to evade detection while maintaining persistence for days after apparent removal.
What happened
The National Information Technology Development Agency issued a security alert on May 7, 2026, warning of AI-powered malware called DeepLoad actively targeting government agencies, financial institutions, businesses, and individuals across Nigeria.
DeepLoad spreads through fake website error prompts that trick users into running malicious commands. Once executed, it silently installs itself and harvests stored credentials and sensitive data from major browsers, using artificial intelligence to evade antivirus detection. The malware incorporates a hidden WMI-based persistence mechanism capable of reactivating the infection up to three days after apparent removal.
Reported impact
A successful infection could give attackers access to bank accounts, mobile money services, and sensitive data. The threat was described as serious and already actively targeting Nigerian entities.
Governance controls
NITDA advised organizations and individuals to implement protective measures immediately, including strengthening cybersecurity measures, avoiding suspicious downloads, and enabling two-factor authentication.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.