Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

E-Financial

How Organisations Can Prevent Financial Losses via Innovative Email Protection

Published

on

email-logo.jpg
Kindly share this post

By peter oluka

Many business organisations and public institutions are faced one way or the other with challenges of their corporation email been compromised. This to a large extent has brought loss of businesses or embarrassment.

Those who have not been able to successfully manage it by being on top of the situation are those whose knowledge and technology partnership need to be upgraded.

In the technology parlance, the Business e-mail compromise (BEC) is when an attacker hacks into a corporate e-mail account and impersonates the real owner to defraud the company, its customers, partners, and/or employees into sending money or sensitive data to the attacker’s account.

BEC is also known as a “man-in-the-email” attack. This is derived from the “man-in-the-middle” attack where two parties think that they are talking to each other directly, but in reality, an attacker is listening in and possibly altering the communication.

This is how it works. A BEC scam starts with research. An attacker will sift through publicly available information about your company from your website, press releases, and even social media posts.

He/she might look for the names and official titles of company executives, your corporate hierarchy, and even travel plans from email auto-replies.

The attacker will then try to gain access to an executive’s e-mail account. To remain undetected, he/she might use inbox rules or change the reply-to address so that when the scam is executed, the executive will not be alerted.

Another trick is to create an e-mail with a spoofed domain. For example, the attacker might use mohammed.adeyemi@samp1e.cominstead of mohammed.adeyemi@sample.com, or emeka.damola@believeme.com instead of emeka.damola@beleiveme.com. If you do not pay close attention, it is easy to get fooled by these slight differences. One of the most famous spoofed domain tricks ever was the “PayPa1.com” – a scam site imitating money transfer website Paypal.com.

After scouting corporate communications for some time, the attacker will probably have a good idea of scam scenarios that might work. For instance, if the company has a lot of suppliers, he/she can send invoices to account for the rush payment of materials. The attacker would know who is responsible for wire transfers and be able to craft a convincing scenario that would require the immediate transfer of funds.

Some of the most prevalent examples of BEC scams are:

  • The fraudulent invoice scamis when a cybercriminal uses an employee’s e-mail to send notifications to customers and suppliers asking for payment to the cybercriminal’s account.
  • The fake boss scamis when a fraudulent email is sent from a business executive’s account to employees instructing them to urgently transfer money from the corporate account to the criminal’s account.
  • The fake attorney scamis when a lawyer’s e-mail address is used to contact clients, asking that they pay money immediately to keep things confidential.

However, business e-mail compromise attacks do not only involve money; sometimes, attackers seek PII or trade secrets.

One high-profile BEC case involved a Lithuanian cybercriminal that used the e-mail addresses of suppliers. Companies that were targeted include Apple and Facebook. By impersonating suppliers, the hacker was able to steal $100 million in two years. In another case, the FACC Ag CEO was fired after such an attack cost the company $54 million.

In 2016, there were at least 40,000 incidents of business e-mail compromise or other incidents that involve e-mails—an increase of around 2,370% since January 2015. In the second half of 2016 alone, the FBI reported more than 3,044 victims in the United States, with a combined loss of around $346 million. Where does most of the money go?

Most of the victims are told to send the money to an Asian bank, usually in Hong Kong or China, or a bank in the United Kingdom.

But you can protect your business or organisation from all these challenges!

Business e-mail compromise attacks are successful for three main reasons:

  1. Insufficient security protocols
  2. Social engineering
  3. Lack of employee awareness

Multi-factor authentication should be implemented as an IT security policy. This will help prevent unauthorized access to e-mails, especially if an attacker attempts to login from a new location. In addition to stronger security protocols, employee education is also important.

Employees should be trained on identifying fraudulent e-mails. Always be skeptical of urgent and rush money transfer requests, especially from C-level executives, and verify those requests, either by phone or in person.

According to Victor Ugwu, Signal Alliance, technical security consultant, the company offers a robust and adaptive email security solution on- premise and in the cloud. Beyond email security, they also provide a tested and trusted Cybersecurity solutions ranging from; Perimeter Security, Infrastructure Security, Cloud, Mobile Security and Managed Security Service.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Financial

PalmPay Expands Access to Digital Insurance Through Strategic Partnerships

Published

on

Kindly share this post

PalmPay, a leading digital banking platform in Africa has announced the launch of strategic partnerships with top-tier insurance providers to offer accessible, affordable and simplified insurance products directly within the PalmPay app.

This initiative reflects the brand’s continued commitment to deepening financial inclusion and underscores its mission to improve the wellbeing of everyday Nigerians.

With only about 8.9% of Nigerians currently covered by any form of health insurance, the country remains one of the least insured populations in Africa. Barriers such as low awareness, affordability challenges, and trust issues continue to hinder broader adoption of insurance products.

PalmPay’s new insurance offering directly addresses these challenges by simplifying the purchase and management of insurance policies within the app. The PalmPay insurance feature is designed to make essential coverage, from health to device, and life insurance easily accessible at affordable prices, eliminating the traditional complexities often associated with insurance.

“Insurance is often perceived as complex or inaccessible, especially among underserved communities.” said Habib Kowontan, Head of Wealth Product at PalmPay. “Through these partnerships, we aim to break down those barriers by offering simple, reliable and affordable insurance options that are easily accessible within the PalmPay app.”

With over 35 million users across Nigeria, PalmPay continues to evolve as a smart, consumer-first digital banking platform. The integration of insurance services complements its growing suite of offerings, which includes transfers, bill payments, high-interest savings, and debit card services, making PalmPay one of the most comprehensive digital banking platforms in the African market.

“Our goal at PalmPay is to remove barriers and make essential services easily accessible to everyone,” said Mr Chika Nwosu, Managing Director of PalmPay. “Through these strategic partnerships, we’re expanding our services to be more inclusive and empowering our users with products that will positively impact their lives and finances.”

This rollout marks a significant milestone in PalmPay’s broader strategy to empower users with tools that enhance their daily lives. Building not just a payments app, but a smart and trusted financial partner for millions of Nigerians.


Kindly share this post
Continue Reading

E-Financial

Fidelity Bank Intensifies Support for Displaced Persons in Makurdi Camp

Published

on

Team Lead, CSR, Fidelity Bank Plc, Victoria Abuka (Left); CEO, The Abbasid Charity Foundation, Hauwa Abbas (Centre); and Branch Leader, Fidelity Bank Plc, Makurdi, Terwase (Right), representing the Regional Bank Head, North Central, Sadi Zawiya, with some beneficiaries during the Fidelity Food Bank distribution event in Makurdi, Benue State recently.
Kindly share this post

In a timely gesture aimed at improving the plight of internally displaced persons (IDP) in Benue State, leading financial institution, Fidelity Bank Plc, has distributed mattresses and essential food items to over 2,000 victims of the Yelwata attacks currently taking refuge at the Ultra-Modern International Market IDP Camp in Makurdi.

Team Lead, CSR, Fidelity Bank Plc, Victoria Abuka (Left); CEO, The Abbasid Charity Foundation, Hauwa Abbas (Centre); and Branch Leader, Fidelity Bank Plc, Makurdi, Terwase (Right), representing the Regional Bank Head, North Central, Sadi Zawiya, with some beneficiaries during the Fidelity Food Bank distribution event in Makurdi, Benue State recently.

The donation, which was carried out in collaboration with the Abbasid Charity Foundation, is part of Fidelity Bank’s ongoing commitment to supporting vulnerable communities through its flagship Fidelity Food Bank program. Since its launch in April 2023, the Food Bank has distributed over 200,000 food packs to beneficiaries across Nigeria’s six geo-political zones.

Speaking about the donation event, the bank’s Divisional Head, Brand and Communications, Dr. Meksley Nwagboh reaffirmed Fidelity Bank’s dedication to Corporate Social Responsibility (CSR) and its mission to uplift communities.

His words, “Since its launch, the Fidelity Food Bank initiative has helped to alleviate the effect of poverty and malnutrition across the country. We are honored to be back in Benue State to continue this impactful initiative, and we hope that today’s donation brings much-needed relief and comfort to the beneficiaries during this difficult time”.

In her remarks, the Executive Officer, the Abbasid Charity Foundation, Mrs. Hawa Abbas, emphasized the importance of restoring dignity to the displaced, stating that the donation of mattresses was to ensure the IDPs no longer sleep on bare floors.

“This gesture is our way of letting the displaced persons know that they are not forgotten. We care deeply for them, and we hope this donation offers some comfort and hope, even in these difficult circumstances,” Abbas noted.

The Executive Secretary of the Benue State Emergency Management Agency (SEMA), Dr. James Iorpuu, who was represented by Camp Manager, Mr. Robert Nyom, expressed deep appreciation to Fidelity Bank and the Abbasid Charity Foundation for their timely support.

“Your intervention has brought much-needed relief to the camp and we thank you for your compassion and generosity towards improving the welfare of the displaced persons,” he said.

The bank’s outreach to the International Market IDP Camp in Makurdi represents the most recent of its ongoing critical and timely interventions. Previously, through its Food Bank Initiative, the bank provided essential food items to more than 1,500 residents impacted by the recent flood disaster in Mokwa, Niger State.

Ranked among the best banks in Nigeria, Fidelity Bank Plc is a full-fledged Commercial Deposit Money Bank serving over 9.1 million customers through digital banking channels, its 255 business offices in Nigeria and United Kingdom subsidiary, FidBank UK Limited.

The Bank is the recipient of multiple local and international Awards, including the 2024 Excellence in Digital Transformation & MSME Banking Award by BusinessDay Banks and Financial Institutions (BAFI) Awards; the 2024 Most Innovative Mobile Banking Application award for its Fidelity Mobile App by Global Business Outlook, and the 2024 Most Innovative Investment Banking Service Provider award by Global Brands Magazine. Additionally, the Bank was recognized as the Best Bank for SMEs in Nigeria by the Euromoney Awards for Excellence and as the Export Financing Bank of the Year by the BusinessDay Banks and Financial Institutions (BAFI) Awards.


Kindly share this post
Continue Reading

E-Financial

Secret Service Seizes $400M in Crypto, Cold Wallet among World’s Largest

Published

on

Kindly share this post

US Secret Service has quietly seized nearly $400 million in digital assets over the past decade, amassing one of the world’s largest crypto cold wallets, Bloomberg reported at the weekend, citing people familiar with the matter.

Secret Service Seizes $400M in Crypto, Cold Wallet among World’s Largest

The agency’s Global Investigative Operations Center (GIOC) has tracked funds through open-source tools, blockchain analysis, and patience, Jamie Lam, an investigative analyst with the US Secret Service, reportedly told law enforcement officials in Bermuda last month.

The agency’s crypto trove, much of which sits in a single cold-storage wallet, results from a string of investigations into scams. Scammers lure targets into seemingly legitimate crypto investment platforms in one typical scheme.

Victims often see initial profits before the sites vanish with their deposits.

“That’s how they do it,” Lam said. “They’ll send you a photo of a really good-looking guy or girl. But it’s probably some old guy in Russia.”

Lam’s team uses domain records, blockchain transactions, and VPN slip-ups to identify fraudsters. In one case, a cryptocurrency payment led investigators to another wallet. In another one, a brief VPN failure exposed an IP address, helping agents piece together the scam’s digital trail.

At the helm of the Secret Service’s crypto strategy is Kali Smith, who directs a team that has trained officials in over 60 countries to unmask online financial crimes.

The agency has focused on jurisdictions with weak oversight or programs selling residency to foreign nationals. “Sometimes after just a week-long training, they can be like, ‘Wow, we didn’t even realize that this is occurring in our country,’” Smith said.

The Secret Service’s work has uncovered scams ranging from romance-investment schemes to sextortion cases. One investigation involved an Idaho teenager who sent a nude photo to an online stranger. The scammer extorted $300 twice before the teen went to the police.

Analysts traced the payments through another coerced teenager acting as a money mule, leading to an account tied to nearly $4.1 million in transactions under a Nigerian passport.

British police arrested the suspected extortionist when he arrived in Guildford, England, where he remains in custody pending extradition.

 

 


Kindly share this post
Continue Reading

Trending