Connect with us

E-Business

Cybercriminals Target Retail Sector -Dimension Data

Published

on

Kindly share this post

New research published in the NTT 2016 Global Threat Intelligence Report has revealed that cybercriminals have shifted their focus from traditional financial markets, to targeting the retail sector.

Retail organisations experienced nearly three times as many cyberattacks as those in the finance sector which was top of the list of cyberattacks on organisations in the 2015 report. Cyberattacks on financial industry dropped significantly to fourteenth position

NTT’s annual Global Threat Intelligence Report contains security threats gathered during 2015 from 8,000 clients of NTT Group security companies including Dimension Data, Solutionary, NTT Com Security, NTT R&D, and NTT Innovation Institute (NTTi3).

This year’s data is based on 3.5 trillion security logs and 6.2 billion attacks. Data is also gathered from 24 Security Operations Centres and seven research and development centres of the NTT Group.

The retail sector topped the list of all cybersecurity attacks on all sectors at just under 11% in this year’s report, knocking the finance sector out of first place.

Matthew Gyde, Dimension Data’s group executive – Security, explained: “The retail and financial sectors process large volumes of personal information and credit card data. Gaining access to these organisations enables cybercriminals to monetise sensitive data such as credit card details in the black market, which validates that cybercriminals are motivated by the rewards of financial crime.

“Retail companies are becoming increasingly popular targets as most process large volumes of personal information, including credit card data, in highly distributed environments with many endpoints and point-of-service devices. Such diverse environments can be difficult to protect.”

Other highlights in the NTT 2016 Global Threat Intelligence Report include: 65% of attacks originated from IP addresses within the US. However, these IP addresses which could be located anywhere in the world. Cybercriminals are adopting low-cost, highly available, and geographically strategic infrastructure to perpetrate malicious activities.

Cybercriminals are increasingly leveraging malware to breach the perimeter defences of organisations. In 2015 there was an 18% increase in malware across all industries, excluding the education sector.

The frequency and complexity of malware is becoming more stealthy and sophisticated: while organisations are developing ¹sandboxes to better understand cybercriminal’s tactics to protect themselves from attacks, at the same time, malware developers are aggressively developing anti-sandbox techniques.

Analysis of ²honeynet attacks in organisations reveals that attackers are making use of telcos and hosting providers to conduct their operations.

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

FG to Train 5, 000 Data Protection Officers

Published

on

Kindly share this post

Federal government has granted the Institute of Information Management permission to conduct examinations and certify data protection specialists on a local level.

FG to Train 5, 000 Data Protection Officers

As the demand for data management grows throughout Africa, Nigeria’s Federal Ministry of Youth Development has signed a Memorandum of Understanding (MoU) with the Nigeria Data Protection Commission (NDPC) to train 5,000 Nigerian youths to become data protection specialists.

The agreement is part of the NDPC’s ambition to create 10,123 data management related jobs in Nigeria.

Dr. Vincent Olatunji, CEO of the NDPC, stressed the growing demand for data protection officers in Nigeria during the signing event.

He stated that there are a large number of data controllers in the country, each of which must have at least one data protection officer.

According to the government, young people can now pursue data management careers and fill expected new roles in the ecosystem.

Olatunji also stated that the NDPC has granted the Institute of Information Management permission to conduct examinations and certify data protection specialists on a local level.

He stated that the goal of this move is to improve local knowledge while also reducing the foreign exchange expenses connected with international training.

“In addition, the certification provided by our in-country body will carry global recognition, ensuring our professionals are competitive on the international stage,” he explained.


Kindly share this post
Continue Reading

E-Business

Kaspersky Warns that Scammers Hide Phishing Links behind Images

Published

on

Kindly share this post

At the end of August, Kaspersky experts discovered a phishing campaign with an unusual attack vector – through an image. This scam targeted organisations in the fields of online retail, distribution, transportation, and logistics. The cyber attackers aimed to steal corporate email credentials from potential victims.

Within the phishing scheme, the cyber attackers send emails in English, allegedly on behalf of a South Korean company. Pretending to be employees of this organisation, the cybercriminals email about sending instructions to their bank for transferring a payment.

They ask potential victims to check the details in the scanned document, which is added to the body of the letter. According to the legend, this must be done quickly in order to receive payment as soon as possible.

“The image in these phishing emails is poorly visible – this is what the attackers are counting on. Even if a person does not expect an email, he may be interested in looking at the details. However, in reality, the image hides a phishing link.

If the users click on the scan, they will be redirected to a fake resource that mimics a file sharing service from Adobe. There, they will be asked to enter the credentials for a corporate email account to gain access to the document.

However, this should never be done, otherwise this information will go to the cybercriminals,” comments Roman Dedenok, a cybersecurity expert at Kaspersky.

To avoid becoming a victim of such phishing attacks, Kaspersky recommends that users do not trust emails from unknown mailboxes, especially when it comes to confidential data, financial transactions and suspicious attachments, even if it visually looks like the email came from an organisation with a good reputation.

Kaspersky also recommends that companies install a reliable security solution that will automatically send such emails to spam, such as Kaspersky Secure Mail Gateway, and also regularly conduct cybersecurity training for employees, teaching them how to recognise social engineering techniques, for example, using the Kaspersky Automated Security Awareness Platform.

 


Kindly share this post
Continue Reading

E-Business

Fake or Cloned Websites are Tricking Shoppers into Making Expensive Mistakes

Published

on

Kindly share this post

By Georgina Crouth

If you’re shopping online, best you have your wits about you because distractions or multitasking could be your undoing.

Fake or Cloned Websites are Tricking Shoppers into Making Expensive Mistakes

Research into online scams in Africa has blamed a lack of vigilance as the most common factor contributing to people falling victim.

And fraudsters, ahead of the curve, are capitalising on that inattention by cloning retail websites, using similar branding and URLs, to trick shoppers of legitimate outlets.

Daily deals website, One Day Only, and Cape Union Mart have both warned that their sites have previously been cloned, advising shoppers to be extra vigilant.

Website cloning has a damaging effect on consumer trust in e-commerce, which is why retailers are educating customers and working with social media platforms and Google to remove cloned accounts.

One Day Only brand and campaign manager Jonathan Spencer says the problem has become out of hand, exacerbated in recent months by the ease of creating clones using AI, which enables anyone to create a new website within minutes.

“It’s quite worrying that it’s so easily done.

“Anyone can put prompts into an AI generator to clone a website, including the artwork. Within minutes, it just pops up.”

While branding and logos are mirrored, the URL is often the dead giveaway: in the case of One Day Only, which ends with .co.za, the URL would end with a .cn, .org or similar.

One Day Only has been targeted on several occasions.

To the unknowing — distracted people or the elderly — the site looks the same, which is why so many are falling victim to it.

Spencer says across the retail landscape, online fraud and phishing attacks have become rife.

“Many other retailers have had a problem with it before, which is why they warn customers to be on the lookout.”

Social media is a cesspit for scams: on Facebook, some clothing “retailers”, often with “Cape Town”, “Jozi” or “South Africa” suffixed to their name for SEO purposes, are catching unobservant shoppers — and racking up thousands of complaints.

There must be more to blockchains than just Bitcoin.

There is. And it’s coming to a future near you soon.

It’s Mine is an entertaining and accessible look at how Bitcoin made its mark, how it all works and how it challenges our long-held beliefs, from renowned expert and frequent Daily Maverick contributor Steven Boykey Sidley.

The sites advertise gorgeous products (using stolen images) at reasonable prices, with “free shipping” within SA.

They may, or may not, be run by local online dropshipping stores but they take no responsibility for inferior quality or wrong orders.

Those sites may have .co.za in the URL but usually are linked to scammers operating from China.

Many customers are reporting that they received items that were vastly different from the photos, were poor quality, or had incorrect sizing. Refunds are refused and customers are required to return items, at their own expense, to China.

Instagram is another challenge: One Day Only has been forced to report numerous Instagram accounts cloning their website.

The Cape Union Mart Group says it has recently become the target of an international scam. Group spokesperson Patuvuyo Mtiya said both Cape Union Mart and Poetry stores’ digital platforms were targeted by fraudsters who used fabricated social media adverts to direct traffic to fake websites, tricking customers into purchasing items from the bogus sites.

“These fraudulent digital platforms are offering products at discounted prices, significantly lower than our standard rates. Despite our best efforts to combat this activity, these scams continue to pose a threat to our valued customers and the integrity of our proudly South African brands.”

Mtiya says while they were not the only company experiencing the fraud, they believe it is crucial to alert the public and take steps to protect consumers from falling victim to these scams.

“We encourage all consumers to exercise caution and take necessary precautions when shopping online,” Mtiya said.

“The Cape Union Mart Group is committed to maintaining the highest standards of security and trust for our customers and will continue to work diligently to combat these fraudulent activities.”

Spencer adds that consumers can protect themselves from spoofing (fake websites), and angler phishing (impersonating trusted sources on social media), by using free online tools like WHOIS to check a website’s age, and Google’s safe browsing function to determine its trustworthiness.

Do your homework before buying online: Reverse search images, read Hello Peter and Google reviews, and click to check on the followers.

The problem of phishing attacks is now so pervasive that in the second quarter of 2024, one in 10 South Africans fell victim to them, according to a recent report by security awareness training platform KnowBe4.

 

Its survey of 800 people from eight African countries, including South Africa, Nigeria, Kenya, Botswana, Ghana, Egypt, and Mauritius, identified prevalent patterns in online scam susceptibility. The participants, primarily working adults aged 25-44, highlighted external and internal factors that influence their vulnerability to scams.

Nearly 40% of respondents said they had fallen for an online scam in the past year — 43% of victims were distracted and multi-tasking when they fell for the scam. The percentage of distracted or multi-tasking victims was higher in Nigeria and South Africa, at 53% and 46%, respectively.

More than half (53%) of the respondents felt a significant or very significant impact on their lives. Most respondents said it took several months to recover after falling for an online scam.

When asked how much money they had lost in the scam, 40% of the victims said they lost the equivalent of $100 (R1,761), 30% lost between$100 and$1,000, and nearly 9% lost more than $1,000. DM

Credit: www.dailymaverick.co.za

 

Georgina Crouth

Georgina Crouth is an associate editor for Business Maverick, covering retail, food, alcohol, travel, motoring, education and tech. She has 20 years’ experience, having also worked for eNCA/e.tv, Independent Media and Caxton. A past member of the Western Cape Rental Housing Tribunal, she has also worked as a consumer journalist since 2015.


Kindly share this post
Continue Reading

Trending