Connect with us

E-Business

Phishing, Scams Hit Nigeria and Kenya with a 174% and 438% Increase in the Number of Detections in Q2 2022

Published

on

Kindly share this post

Kaspersky analysis has revealed that attacks related to data loss threats (phishing and scams/social engineering) increased significantly in Africa in Q2 2022 in comparison with the previous quarter. The company’s security solutions detected 10,722,886 phishing attacks in Africa in Q2.

Kenyan users were influenced the most by this type of threat: there were 5,098,534 phishing attacks detected in 3 months – a growth of 438% when compared to the previous quarter. It was followed by South Africa (4,578,216 detections and a growth of 144%) and Nigeria (1,046,136 detections and a growth of 174%).

Social engineering, which is sometimes called “human hacking” scams, are used in many ways, and for different purposes, to lure unwary users to the site and trick them into entering personal information.

The latter often includes financial credentials such as bank account passwords or payment card details, or login details for social media accounts. In the wrong hands, this opens doors to various malicious operations, such as money being stolen, or corporate networks being compromised.

Phishing is a strong attack method because it is done at a large scale. By sending massive waves of emails under the name of legitimate institutions or promoting fake pages, malicious users increase their chances of success in their hunt for innocent people’s credentials. Phishers deploy a variety of tricks to bypass e-mail blocking and lure as many users as possible to their fraudulent sites.

A common technique is HTML attachments with partially or fully obfuscated code. HTML files allow attackers to use scripts, obfuscate malicious content to make it harder to detect, and send phishing pages as attachments instead of links.

In particular, while vacation season is high across the globe, scammers are trying to lure travelers who are looking for interesting places to go, cheap places to stay and reasonably priced flights.

Kaspersky researchers have observed intensified scamming activities, with numerous phishing pages distributed under the guise of airline and booking services. The number of attempts to open phishing pages related to booking and airline services in the first half of 2022 was 4,311 in the Middle East, Turkey and Africa (META) region.

“Planning a vacation is not easy. People can spend weeks, even months, looking for the perfect place to stay and the tickets to get them there. Fraudsters use this to lure users that have grown tired of searching for great deals.

After two years of flight restrictions imposed by the pandemic, travelling is back. But so are travel scams – with intensified scamming activity targeting users through fake booking and rental services. Such attacks are totally preventable, which is why we urge users to be skeptical about overly generous offers. If an offer seems too good to be true, it probably is,” comments Mikhail Sytnik, security expert at Kaspersky.

To keep yourself protected from phishing and scams, Kaspersky experts recommend:

  • Carefully looking at the address bar before entering any sensitive information, such as your login details and password. If something is wrong with the URL (i.e., spelling, it doesn’t look like the original or it uses some special symbols instead of letters) don’t enter anything on the site. If in doubt, check the certificate of the site by clicking on the lock icon to the left of the URL.
  • Not clicking on links that come from unknown sources (either through e-mails, messaging apps or social networks).
  • Visiting the business’ official website if you see a giveaway offered in e-mail or on social media by a travel company or an airline to confirm the giveaway exists. You should also carefully check the links the giveaway ad leads you to.
  • Using a good security solution that can protect you from spam emails and phishing attacks.

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

TD Africa Dangles Discounts on Mercury Inverters

Published

on

Kindly share this post

In response to Nigeria’s epileptic power supply and the need for a cost-effective back-up, TD Africa, the authorised distributor of Mercury Inverters on the continent, is encouraging Nigerians to take control of their power needs with a discounted offer on all Mercury inverters.

This offer will not only reduce overdependence on the exorbitant fuel-powered generating option widely used, but also offer a seamless and uninterrupted power supply while cutting operational cost by more than 50%.

“Mercury Inverters are a game-changer for Nigerians seeking to overcome the challenges of frequent power outages,” said Toyin Adeniji, TD Africa’s Business Manager for Mercury Inverters.

According to her, the inverters exceptional performance, durability, and affordability, makes it a reliable and sustainable solution that can enhance both personal and business productivity.

TD Africa’s move to discount these Inverters will make the product accessible to more  Nigerians, providing an affordable and reliable power backup option that promises to improve the overall quality of life for individuals and businesses.

The inverters which come in 10KVA and 7.5KVA with a 120V, also contribute to environmental sustainability by minimizing carbon emissions.

While this discounted offer is for a limited time, how to take advantage of this offer can be obtained at  [email protected].

 


Kindly share this post
Continue Reading

E-Business

FG to Train 5, 000 Data Protection Officers

Published

on

Kindly share this post

Federal government has granted the Institute of Information Management permission to conduct examinations and certify data protection specialists on a local level.

FG to Train 5, 000 Data Protection Officers

As the demand for data management grows throughout Africa, Nigeria’s Federal Ministry of Youth Development has signed a Memorandum of Understanding (MoU) with the Nigeria Data Protection Commission (NDPC) to train 5,000 Nigerian youths to become data protection specialists.

The agreement is part of the NDPC’s ambition to create 10,123 data management related jobs in Nigeria.

Dr. Vincent Olatunji, CEO of the NDPC, stressed the growing demand for data protection officers in Nigeria during the signing event.

He stated that there are a large number of data controllers in the country, each of which must have at least one data protection officer.

According to the government, young people can now pursue data management careers and fill expected new roles in the ecosystem.

Olatunji also stated that the NDPC has granted the Institute of Information Management permission to conduct examinations and certify data protection specialists on a local level.

He stated that the goal of this move is to improve local knowledge while also reducing the foreign exchange expenses connected with international training.

“In addition, the certification provided by our in-country body will carry global recognition, ensuring our professionals are competitive on the international stage,” he explained.


Kindly share this post
Continue Reading

E-Business

Kaspersky Warns that Scammers Hide Phishing Links behind Images

Published

on

Kindly share this post

At the end of August, Kaspersky experts discovered a phishing campaign with an unusual attack vector – through an image. This scam targeted organisations in the fields of online retail, distribution, transportation, and logistics. The cyber attackers aimed to steal corporate email credentials from potential victims.

Within the phishing scheme, the cyber attackers send emails in English, allegedly on behalf of a South Korean company. Pretending to be employees of this organisation, the cybercriminals email about sending instructions to their bank for transferring a payment.

They ask potential victims to check the details in the scanned document, which is added to the body of the letter. According to the legend, this must be done quickly in order to receive payment as soon as possible.

“The image in these phishing emails is poorly visible – this is what the attackers are counting on. Even if a person does not expect an email, he may be interested in looking at the details. However, in reality, the image hides a phishing link.

If the users click on the scan, they will be redirected to a fake resource that mimics a file sharing service from Adobe. There, they will be asked to enter the credentials for a corporate email account to gain access to the document.

However, this should never be done, otherwise this information will go to the cybercriminals,” comments Roman Dedenok, a cybersecurity expert at Kaspersky.

To avoid becoming a victim of such phishing attacks, Kaspersky recommends that users do not trust emails from unknown mailboxes, especially when it comes to confidential data, financial transactions and suspicious attachments, even if it visually looks like the email came from an organisation with a good reputation.

Kaspersky also recommends that companies install a reliable security solution that will automatically send such emails to spam, such as Kaspersky Secure Mail Gateway, and also regularly conduct cybersecurity training for employees, teaching them how to recognise social engineering techniques, for example, using the Kaspersky Automated Security Awareness Platform.

 


Kindly share this post
Continue Reading

Trending