Suspected cybercriminals have reportedly compromised the domain of Nigeria’s banking giant GTBank in a massive phishing operation that began on the night of August 14, 2024.
The breach occurred just a day after the bank’s domain name was renewed for another five years, from August 13, 2024, to March 21, 2029, according to multiple online platforms that monitor domain information.
The attackers, whose identities remain unknown, are believed to have created an additional HTTP layer on the bank’s website. This move is seen as an attempt to deceive customers and steal sensitive data through phishing schemes.
A cybersecurity expert familiar with the Nigerian banking sector suggested that the bank’s login credentials may have been compromised, rather than the domain itself being stolen for resale. This breach raises concerns about whether GTBank had implemented DNSSEC (Domain Name System Security Extensions), which could have potentially mitigated the attack.
READ ALSO: BREAKING: Oreo and Coca-Cola Team Up for New Flavor Collaboration
Despite the serious nature of the attack, GTBank’s mobile banking infrastructure remains operational, with Android and iOS applications still functional. However, the incident has sparked concerns about the security measures in place at one of Nigeria’s largest banks, with potential consequences for the staff involved in the bank’s cybersecurity.
As the situation unfolds, customers are advised to remain vigilant and cautious when accessing the bank’s services online.
