Connect with us

Uncategorized

Nigeria: Companies’ Losses to Data Theft Bigger than Financial Fraud

Published

on

Kindly share this post

Olufemi Ake, country manager, ESET Nigeria and Ghana has called for comprehensive approach to combating and mitigating cybercrimes in the West Africa market, adding that focusing squarely on electronic financial (eFinancial) frauds to the expense of other sectors would create room for increased data/information loss by companies.

Ake, who spoke to Nigeria CommunicationsWeek in his office on the sideline of 2016 CyberXchange Conference said that Nigeria and neighbouring countries must step up cyber crime laws enforcement too.

Ake spearheads the strengthening of the ESET brand in the region by opening access to strong, trust-based relationships with private & public sectors and ensuring symbiotic business relationship and growth with partners of ESET within the operational markets.

Before joining the Africa markets, he had offered professional advice and consultancy services to clients in the United Kingdom while working with Capita, Lloyds Banking Group and BNP Paribas Real Estate. He had acquired indispensable knowledge in analysing market trends and implementing business requirements from the organisations he has worked for to date.

Ake relocated to join Diageo Plc where he worked with regional sales teams that collectively improved and implemented strategic plans for sales distribution with a number of initiatives which made a huge impact within months where he recorded an outstanding growth of +5.9% & +5.2% in Market Share in two top brand categories in 2012. ESET is equally benefitting from his wealth of experience with phenomenal double-digits growth recorded year-on-year since joining the business.

He graduated as a Planner at the University of Sheffield, United Kingdom and has immense passion in impacting lives positively. His best part of his experience is the ability to work with people of different social and moral background, taking their views on board and applying them to various elements of his profession. He spoke to peter oluka

How to Manage ‘Insider’ Instigated System Breaches
There is always the saying (I will use ICT security in this case as an example) ‘ICT security is as good as the weakest link of the strong chain’.
So, you can have millions of dollars ICT security investment, but if the ‘user’ or staff is ‘weak’ when it comes to taking measures not to expose the organisation, you need to be concerned.
They have to be aware of the dangers of not keeping company’s ‘data or information’ secured. They need to ask levels of questions while dealing with outsiders.
This is how social hacking occurs- where an insider provides information to an external person, allowing access to company data or secure environment. So, it is advisable to have concrete arrangement with your staff on how to manage the gateway to the company data/information.

West African Cyber Security Ecosystem
To put it straight, individuals, organsiations and the government at large, will be in trouble if cyber criminals come to terms the resources available in West African market. In the other hand, if we know what we can gain financially and otherwise by preventing attacks, we can reduce the risks. Organizations in the West African region need to step up their cyber defense, especially Nigeria and Ghana.
The markets’ focus has been on electronic financial frauds involving individuals.
However, cyber crime goes beyond efinancial fraud. Our government agencies need to be watchful on how information and data is kept. Big data, Internet of Things (IoTs), artificial intelligence and so many internet dependent devices, robots as well, are pushing for availability of more data online, especially with third party involvement.
The focus should be that our data are secured, because is not just money. Many of them do it for bragging rights. They steal as much data, disrupt systems/data, selling data abroad just for fun/fame or to prove a right.
Therefore, we need to focus on comprehensive approach to information/data security, not just financial fraud.
According to Barrister Adebayo Shittu, Minister of Communications, we lost about N127billion to cyber crime in 2015, but if you measure what companies lose to information and data theft, it is beyond measures. We have to ensure companies put strong levels of security to prevent impending dooms, especially in regards to securing customers’ data.

Enforcement Key to Cyber Security
There is no option to enforcement in entrenching cyber security processes in any organization or among government agencies. You can have ‘paper-tiger’ laws; very robust in its provisions, but without enforcement, the system can never feel the impact.
Take for instance, in Lagos, there are laws prohibiting indiscriminate parking of cars, however, not until LASTMA and other agencies took it up, the laws were ‘somehow’ idle.
To some people, because enforcement involves money, they would want to cut corners. But, if you refuse to insure your car, for instance, when an accident happens, you bite your tongue.
This applies to institutions; if you have policy framework, maybe to have two-factor authentication for internal processes which is supposed to curb unauthorized access to company network or resources and there is no enforcement to that effect, people can breach it.
Some companies even forget or play down on renewing their cyber security licenses. That makes them even more vulnerable.

Free Internet/Downloadable Anti-Virus: How Secured?
They are safe and secured to an extent. We also offer such free anti-viruses for mobile and computers ranging from three months to year usage. But they give you basic anti-malware and virus. When it comes to taking to another level like anti-phishing as a feature to prevent intentional hacking targeted at your user name and password, the free anti-virus wouldn’t give you such protection.
We also have a feature called anti-theft, which helps you lock and wipe device data remotely and also gives you information on recovering your lost or stolen mobile phone or computer. It also takes webcam or phone camera pictures of the unsolicited user of the lost or stolen device; which is a sort of insight on recovering your device. So, I will not advice people to depend so much on free anti-virus downloadable from the internet.

Telecos, Banks and Phish Emails
The first step to preventing falling prey of phish emails is: ‘if you are not sure, do not click’. Someone sends you congratulatory email or text that you have won a jackpot. But, it is obvious you never played a raffle.
On the banks’ side, they clone the emails and send you message, asking for confirmation of a transaction. Did you do such transaction? Do you think a bank will send you email requesting for password or PIN?
This sort of mail is meant to scare you. By clicking, you automatically grant them access to your computer or data and may end up collecting your sensitive information or even going as far as encrypting your files. So, in that case, what is advisable is to call the bank if you are in doubt and if related to financial transactions. If it is general phishing email, please do delete immediately from your inbox.

Growing Cyber Threat On Schools, NGOs, Religious Organisations, etc.
ESET’s message to everyone is: secure your devices. As far as your device is connected to the internet or you use it to exchange data, there is need to secure it.
Before now, churches, schools or non-governmental organizations seemed not attractive to cyber criminals, but we have seen a growing number of schools coming to us to secure their environment due to increasing cyber security threats. You have exam questions, payrolls, congregation personal and sensitive data and so many other information that requires protection.
Can you imagine a scenario where a pastor has prepared his sermon and on Sunday morning upon mounting the podium, he file gets encrypted or completely erased? In the present world, your eyeglasses, microwave, refrigerator and others will get connected, it calls for more care.
Cyber criminals ‘seize’ air control towers and redirect aircrafts or make them ‘blind’ and they can’t land. The world can be shut down.
Recently, we have seen high profile internet security breaches. That’s why I said the more Nigeria is being recognized at the international scene, the more cyber related attacks we should expect.

Sectorial ICT Security: Health
It is going to be disastrous when cyber criminals face the health sector. The only thing is that most of our hospitals are still paper prone environment.
However incidences in the health sector actually lead to breakup of homes, suicide, especially when they expected the hospital site to be protected. This is because doctors hold tons of confidential records of patients which in the real sense of it, should be encrypted and kept away from any third-party.
Exposing these would certainly lead to disruption, series of lawsuits, and distrust in the system. So, the emergence of paperless hospitals is better for higher productivity, but the hackers tend to feed on them too. Hence there as an exchange of data, it can be intercepted. Imagine a hacker goes into a hospital’s records and steal information about the President’s or a Governor’s health status, publish same, it can cause chaos in the society.   

Grooming Cyber Security ‘Armies’
The government should support IT. I like what the current administration is trying to do by focusing on IT entrepreneurs. There is so much focus on Nigeria lately which cumulated to the founder of Facebook paying a visit to Co-creation Hub and Andela.
It is a positive sign that IT is recognized. However, there is need for more support in providing direct IT jobs in the civil service and soft landing for entrepreneurs to set up their businesses in order to create more jobs within and outside of the IT sector.
There are so many bureaucratic processes that need to be revisited. IT is expensive currently in Nigeria because we import most of the solutions we provide.
If we are able to provide them locally; Nigerians writing IT security codes, providing security solutions and setting up research centres to analyse malware and other forms of threats, it will provide safe climate for us and we can export too. At that point, IT security becomes cheaper and companies wouldn’t be reluctant in renewing licenses in some cases.

ESET’s Impact On Cyber Security Solutions in Nigeria
ESET, basically, focuses more on educating and sensitizing our users and the public in generalon the importance of IT security.
The aim is to have our users enjoy safer technology and secure all data-exchange or internet-connected devices –‘smartphone, tablet, servers or computers’ with our easy to use and affordable security solutions. That is our goal.

Solutions
ESET solutions are segmented into two, tailored to provide security for users at home and businesses. We have business security solutions such as Two-Factor Authentication (2FA), Back-Up and Recovery, Data Encryption, Data Loss Prevention, Productivity Management, Enterprise Endpoint, Server and Mail Security Solutions.
Our Two-Factor Authentication (2FA) solution helps prevent unauthorised access to companies’ data or the environment. These days, usernames and password are becoming less secure and cumbersome for users to manage hence the need for additional level of security which our 2FA solution offers with a one-time digital burn-after password which can be set up on user’s mobile devices. 
We also provide solutions which offer Full-Disk encryption to help secure data and information running through your mobile phones or computers.
This helps prevent third-party access to your data in case of loss or theft. Our home security solutions offer Parental Control, Internet Security, Antivirus and Mobile Security for personal devices.
The ESET Parental Control helps parents manage children’s activities on their mobile phones and internet with web and application control features.

ESET’s Preparedness to Offer Insights to Users on Cyber Security Prevention
Absolutely, we are proactively leading a course for insights to aid users be ahead of breaches. In light of this, ESET have released a threat intelligence service that can be used by companies to detect, analyse emerging threats and also go as far as actively preventing potential damages, or at least to implement the necessary measures to mitigate them.
The essence is to provide organisations the idea of where to prevent such happenings in near future. The solution is called ESET Threat Intelligence and it is compatible with all non-ESET existing security solutions within the company IT infrastructure.
On our subscriptions, we are quite affordable as compared to others. To businesses, ESET is one of most affordable and effective IT security solutions that they can buy in Nigeria and Ghana.
Every now and then, we also run cost-cutting promotions for our users to have soft landing when buying or renewing their licenses due to the economic situation of the country. ESET recognizes Nigeria and Ghana; that is why we are here. 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

Uncategorized

Our 2023 Ads Safety Report

Published

on

Kindly share this post

By Duncan Lennox, VP & GM of Ads Privacy and Safety

Billions of people around the world rely on Google products to provide relevant and trustworthy information, including ads. That’s why we have thousands of people working around the clock to safeguard the digital advertising ecosystem. Today, we are releasing our annual Ads Safety Report to share the progress we’ve made in enforcing our advertiser and publisher policies and to hold ourselves accountable in our work of maintaining a healthy ad-supported internet.

The key trend in 2023 was the impact of generative AI. This new technology introduced significant and exciting changes to the digital advertising industry, from performance optimization to image editing. Of course, generative AI also presents new challenges. We take these challenges seriously and will outline the work we are doing to address them head-on.

Just as importantly, generative AI presents a unique opportunity to improve our enforcement efforts significantly. Our teams are embracing this transformative technology, specifically Large Language Models (LLMs), so that we can better keep people safe online.

Gen AI Bolsters Enforcement 

Our safety teams have long used AI-driven machine learning systems to enforce our policies at scale. It’s how, for years, we’ve been able to detect and block billions of bad ads before a person ever sees them. But, while still highly sophisticated, these machine learning models have historically needed to be trained extensively – they often rely on hundreds of thousands, if not millions of examples of violative content.

LLMs, on the other hand, are able to rapidly review and interpret content at a high volume, while also capturing important nuances within that content. These advanced reasoning capabilities have already resulted in larger-scale and more precise enforcement decisions on some of our more complex policies. Take, for example, our policy against Unreliable Financial Claims which includes ads promoting get-rich-quick schemes. The bad actors behind these types of ads have grown more sophisticated. They  adjust their tactics and tailor ads around new financial services or products, such as investment advice or digital currencies, to scam users.

To be sure, traditional machine learning models are trained to detect these policy violations. Yet, the fast-paced and ever-changing nature of financial trends make it, at times, harder to differentiate between legitimate and fake services and quickly scale our automated enforcement systems to combat scams. LLMs are more capable of quickly recognizing new trends in financial services, identifying the patterns of bad actors who are abusing those trends and distinguishing a legitimate business from a get-rich-quick scam. This has helped our teams become even more nimble in confronting emerging threats of all kinds.

We’ve only just begun to leverage the power of LLMs for ads safety. Gemini, launched publicly last year, is Google’s most capable AI modeI. We’re excited to have started bringing its sophisticated reasoning capabilities into our ads safety and enforcement efforts.

Our Work to Prevent Fraud and Scams

In 2023, scams and fraud across all online platforms were on the rise. Bad actors are constantly evolving their tactics to manipulate digital advertising in order to scam people and legitimate businesses alike. To counter these ever-shifting threats, we quickly updated policies, deployed rapid-response enforcement teams and sharpened our detection techniques.

  • In November, we launched our Limited Ads Serving policy, which is designed to protect users by limiting the reach of advertisers with whom we are less familiar. Under this policy, we’ve implemented a “get-to-know-you” period for advertisers who don’t yet have an established track record of good behavior, during which impressions for their ads might be limited in certain circumstances–for example, when there is an unclear relationship between the advertiser and a brand they are referencing. Ultimately, Limited Ads Serving, which is still in its early stages, will help ensure well-intentioned advertisers are able to build up trust with users, while limiting the reach of bad actors and reducing the risk of scams and misleading ads.

  • A critical part of protecting people from online harm hinges on our ability to respond to new abuse trends quickly. Toward the end of 2023 and into 2024, we faced a targeted campaign of ads featuring the likeness of public figures to scam users, often through the use of deepfakes. When we detected this threat, we created a dedicated team to respond immediately. We pinpointed patterns in the bad actors’ behavior, trained our automated enforcement models to detect similar ads and began removing them at scale. We also updated our misrepresentation policy to better enable us to rapidly suspend the accounts of bad actors.

Overall, we blocked or removed 206.5 million advertisements for violating our misrepresentation policy, which includes many scam tactics and 273.4 million advertisements for violating our financial services policy. We also blocked or removed over 1 billion advertisements for violating our policy against abusing the ad network, which includes promoting malware.

The fight against scam ads is an ongoing effort, as we see bad actors operating with more sophistication, at a greater scale, using new tactics such as deepfakes to deceive people. We’ll continue to dedicate extensive resources, making significant investments in detection technology and partnering with organizations like the Global Anti-Scam Alliance and Stop Scams UK to facilitate information sharing and protect consumers worldwide.

Investing in Election Integrity

Political ads are an important part of democratic elections. Candidates and parties use ads to raise awareness, share information and engage potential voters. In a year with several major elections around the world, we want to make sure voters continue to trust the election ads they may see on our platforms. That’s why we have long-standing identity verification and transparency requirements for election advertisers, as well as restrictions on how these advertisers can target their election ads. All election ads must also include a “paid for by” disclosure and are compiled in our publicly available transparency report. In 2023, we verified more than 5,000 new election advertisers and removed more than 7.3M election ads that came from advertisers who did not complete verification.

Last year, we were the first tech company to launch a new disclosure requirement for election ads containing synthetic content. As more advertisers leverage the power and opportunity of AI, we want to make sure we continue to provide people with the greater transparency and the information they need to make informed decisions.

Additionally, we’ve continued to enforce our policies against ads that promote demonstrably false election claims that could undermine trust or participation in democratic processes.

Overall 2023 Numbers

Our goal is to catch bad ads and suspend fraudulent accounts before they make it onto our platforms or remove them immediately once detected. AI is improving our enforcement on all these fronts. In 2023, we blocked or removed over 5.5 billion ads, slightly up from the prior year, and 12.7 million advertiser accounts, nearly double from the previous year. Similarly, we work to protect advertisers and people by removing our ads from publisher pages and sites that violate our policies, such as sexually explicit content or dangerous products. In 2023, we blocked or restricted ads from serving on more than 2.1 billion publisher pages, up slightly from 2022. We are also getting better at tackling pervasive or egregious violations. We took broader site-level enforcement action on more than 395,000 publisher sites, up markedly from 2022.

To put the impact of AI on this work into perspective: last year more than 90% of our publisher page level enforcement started with the use of machine learning models, including our latest LLMs. Of course, any advertiser or publisher can still appeal an enforcement action if they think we got it wrong. Our teams will review it and, in the cases where we find errors, use it to improve our systems.

Staying Nimble and Looking Ahead

When it comes to ads safety, a lot can change over the course of a year: the introduction of new technology such as generative AI to novel abuse trends and global conflicts. And the digital advertising space has to be nimble and ready to react. That’s why we are continuously developing new policies, strengthening our enforcement systems, deepening cross-industry collaboration and offering more control to people, publishers and advertisers.

In 2023, for example, we launched the Ads Transparency Center, a searchable hub of all ads from verified advertisers, which helps people quickly and easily learn more about the ads they see on Search, YouTube and Display. We also updated our suitability controls to make it simpler and quicker for advertisers to exclude topics that they wish to avoid across YouTube and Display inventory. Overall, we made 31 updates to our Ads and Publisher policies.

Though we don’t yet know what the rest of 2024 has in store for us, we are confident that our investments in policy, detection and enforcement will prepare us for any challenges ahead.


Kindly share this post
Continue Reading

Uncategorized

InDrive Upgrades App, Announces New Safety Details

Published

on

Kindly share this post

InDrive, an e-hailing firm, announced app upgrades as well as new safety details for riders and drivers.

InDrive’s updated Safety Centre now allows its support team to contact a user’s trusted contacts in emergencies and the number of trusted contacts has been increased from one to five. InDrive says that it is also easier for its support team to share information with emergency services, among other things.

Also, the company said by clicking on the app’s SOS-button, users can see all the information needed when requesting help or reporting an incident – along with a button to call police or ambulance services.

InDrive’s app design has also been updated to improve user experience, making the Safety Centre more visible, it said.

Further, the company said: “inDrive is also testing photo sharing and automatic translation of chat messages, which have been added to the in-app chat function. These make it easier for the driver and rider to clarify the pickup point, and communicate in the same language while traveling.

“Passengers and drivers stay within the application when using these features, so there’s no need to use across other platforms, thereby protecting personal information. For now the feature is currently being tested by a limited number of users to improve its functionality before it is rolled out to everyone.”

The announcement today comes after the company recently revealed it had expanded its financing arrangement with General Catalyst to $146 million, allowing the company to engage in product upgrades, extend its service offerings, and enter new markets in Africa.


Kindly share this post
Continue Reading

Uncategorized

NIN-SIM Linkage: Telcos to Bar More Phones Lines from March 29

Published

on

Kindly share this post

Telecommunications operators in the country are gearing up for another round of disconnections of phone lines for subscribers who have failed to link their National Identification Numbers (NIN) with their SIM cards.

NIN-SIM Linkage: Telcos to Bar More Phones Lines from March 29

The disconnection which will happen Friday, March 29, following a directive from the Nigerian Communications Commission (NCC) requiring all registered SIMs lacking proper NIN linkage to be either corrected or completely disconnected from networks.

The ongoing process, which commenced on February 28, 2024, is part of the government’s efforts to curb criminal activities like banditry and kidnapping, contributing to enhancing national security.

There are indications of a potential third phase in April 2024.

Operators have reportedly cooperated with the NCC in executing the directive, affirming their commitment to national security objectives and assuring full compliance by the specified deadlines.

The second phase will target subscribers with five or more SIMs from a single operator lacking verified NIN-SIM linkages.

The third phase, set to commence on April 15, will focus on subscribers with four SIMs or fewer and unverified NINs.

While telecom companies seek a review and extension of the April deadline for the third phase, indications from the NCC suggest a steadfast adherence to the established timelines.

The first phase saw the barring of 40 million lines, comprising around 17 million active SIMs without NIN submissions and 23 million inactive SIMs lacking NINs over the past year.

 

 

 

 


Kindly share this post
Continue Reading

Trending