WhiteHat NG is Nigeria's leading CERT-style Information Sharing and Analysis Center (ISAC). Founded in 2019, it serves as a people's Computer Emergency Response Team, providing cybersecurity advisories, vulnerability disclosure services, and threat intelligence to protect Nigerian cyberspace. WhiteHat NG publishes security advisories about vulnerabilities and threats affecting Nigerian organizations and citizens.

How do I report a security vulnerability to WhiteHat NG?

You can report security vulnerabilities through WhiteHat NG's Vulnerability Disclosure Program (VDP) at whitehat.ng/vdp/report. The platform accepts reports about vulnerabilities in Nigerian digital infrastructure, government systems, and private sector applications. All reports are handled confidentially by trained security professionals who coordinate responsible disclosure with affected organizations.

What types of security advisories does WhiteHat NG publish?

WhiteHat NG publishes four severity levels of security advisories: Critical (immediate action required), High (significant risk), Medium (moderate risk), and Low (minimal risk). Advisories cover topics including software vulnerabilities, malware campaigns, phishing attacks, data breaches, and emerging cyber threats affecting Nigeria. All advisories are available via web and RSS feed at whitehat.ng/advisories.

Is WhiteHat NG affiliated with the Nigerian government?

WhiteHat NG operates as an independent, community-driven cybersecurity organization. While it collaborates with government agencies and private sector partners on security matters, it maintains independence to serve as a trusted neutral party for vulnerability disclosure and security coordination. This independence allows WhiteHat NG to advocate for both security researchers and affected organizations.

How can organizations partner with WhiteHat NG?

Organizations can partner with WhiteHat NG through several programs: becoming an information sharing partner for threat intelligence, participating in the Vulnerability Disclosure Program as a receiving organization, sponsoring cybersecurity awareness initiatives, or contributing to advisory development. Contact partnerships@whitehat.ng or visit the About page for more information on collaboration opportunities.

Alert: The Declutter Deception - A Digital Fraud Story

Overview

One such scheme involves a fraudster who steals images of items from legitimate declutter businesses and masquerades as a genuine seller. By creating enticing ads on platforms like Instagram and Facebook, they attract potential buyers looking for great deals.

Evidence of the Scam

Declutter Scam Evidence 1

Screenshot showing how scammers copy product images from legitimate sellers.

Declutter Scam Evidence 2

Example of fake listings created using stolen product images.

How the Scam Works

Image Theft: Fraudsters copy product images from legitimate declutter/resale businesses
Fake Listings: These images are used to create convincing sales posts on social media
Engagement: Victims respond to attractive pricing and apparent quality
Payment: Victims are convinced to pay via bank transfer or mobile money
Disappearance: After payment, the fraudster blocks the victim and disappears

Red Flags to Watch For

Prices that seem too good to be true
Seller insisting on bank transfer only
Refusal to meet in person or use escrow
Pressure to pay quickly
New accounts with limited history
Stolen or stock photos (use reverse image search)

Protective Measures

For Buyers

Verify seller identity and history
Use platform-provided payment protection when available
Meet in person for high-value transactions
Use reverse image search on product photos
Be wary of deals that seem too good

For Legitimate Businesses

Watermark your product images
Report fake accounts impersonating your business
Alert your customers about impersonation attempts

Reporting

If you've been a victim of this scam, report to:

Your bank immediately
Nigeria Police Cybercrime Unit
WhiteHat NG for tracking and awareness

WhiteHat NG Fraud Alert