Malicious Data Harvesting Links Impersonating National Identification Authority (NIA)

Background

The Cyber Security Authority (CSA) has observed the circulation of malicious links supposedly from the National Identification Authority (NIA) requesting citizens who require correction on their Ghana Cards to provide their personal information.

Key Findings

  • The links are being used to harvest personally identifiable information (PII) of unsuspecting victims.
  • The links are mainly distributed through social media platforms such as WhatsApp, Facebook Messenger, Instagram, and Telegram.
  • The links in circulation include:
    • https://bit.ly/Correction-Of-Name
    • https://bit.ly/Correction-Of-Date-Of-Birth
    • https://bit.ly/Correction-Of-Gender
    • https://bit.ly/Other-Types-Of-Correction
  • The links are accompanied with the message: ”NIA CORRECTION PORTAL IS OPEN Due to high level of complain, the Federal Government have urge National Identification Authority (NIA) to open up their CORRECTION PORTAL and attend to the complaints of bonafide citizens of Ghana and Correction is FREE”.
  • The harvested PII may be used to conduct phishing attacks and other fraudulent activities.

Recommendation

  • Be cautious of links that are unsolicited, even if they appear to come from someone you know. Verify with the sender before clicking on any link.
  • Avoid clicking on links in suspicious or unexpected messages and emails, especially those that ask you to enter personal information or login credentials.
  • Use a trusted link scanner or URL checker before clicking on a link. This will help to identify any malicious links before you click on them.
  • Keep all software including antivirus on your devices up to date. This will help to prevent attackers from exploiting known vulnerabilities.

Contact the Cyber Security Authority

The CSA has a 24-hour Cybersecurity/Cybercrime Incident Reporting Points of Contact (PoC) for reporting cybercrimes and for seeking guidance and assistance on online activities, Call or Text – 292, WhatsApp – 0501603111, Email – report@csa.gov.gh

Issued by Cyber Security Authority
August 23, 2023