Connect with us

News

Kaspersky says Phishing Diversified During COVID-19 Outbreak with 2 million Attacks in Q2 in Africa

Published

on

Kindly share this post

Kaspersky analysis has revealed that phishing attacks are becoming increasingly more targeted. A number of new tricks have also been found – from HR dismissal emails to attacks disguised as delivery notifications.

As a result of such tendencies, security solutions have detected 2,023,501 phishing attacks in South Africa, Kenya, Egypt, Nigeria, Rwanda and Ethiopia. These and other findings are documented in Kaspersky’s new spam and phishing in Q2 2020 report.

Phishing is one of the oldest and most flexible types of social engineering attacks. They are used in many ways, and for different purposes, to lure unwary users to the site and trick them into entering personal information.

The latter often includes financial credentials such as bank account passwords or payment card details, or login details for social media accounts. In the wrong hands, this opens doors to various malicious operations, such as money being stolen or corporate networks being compromised. This makes phishing a popular initial infection method.

South African users have been influenced the most by this type of threat: there were 616,666 phishing attacks detected in 3 months. It was followed by Kenya (514,361), Egypt (492,532), Nigeria (299,426), Rwanda (68,931) and Ethiopia (31,585).

Phishing is a strong attack method because it is done at such a large scale. By sending massive waves of emails under the name of legitimate institutions or promoting fake pages, malicious users increase their chances of success in their hunt for innocent people’s credentials. The first six months of 2020, however, have shown a new aspect to this well-known form of attack.

Targeted attacks: Small businesses in focus

As Kaspersky analysis has indicated, in Q2 2020, phishers increasingly performed targeted attacks, with most of their focus on small companies. To attract attention, fraudsters forged emails and websites from organisations whose products or services could be purchased by potential victims. In the process of making these fake assets, fraudsters often did not even try to make the site appear authentic.

Such targeted phishing attacks can have serious consequences. Once a fraudster has gained access to an employee’s mailbox, they can use it to carry out further attacks on the company the employee works for, the rest of its staff, or even its contractors.

Jack of all trades: New tricks for old purposes

The news agenda, following the COVID-19 outbreak, has already influenced the “excuses” fraudsters use when asking for personal information. This included disguising their communications with unsuspecting users as:

Delivery services. At the peak of the pandemic, organisations responsible for delivering letters and parcels were in a hurry to notify recipients of possible delays. These are the types of emails that fraudsters began to fake, with victims asked to open an attachment to find out the address of a warehouse where they could pick up a shipment that did not reach its destination.

Postal services. Another relatively original move used by fraudsters was a message containing a small image of a postal receipt. The scammers expected that the intrigued recipient would accept the attachment (which, although it contained ‘JPG’ in the name, was an executable archive) as the full version and decide to open it. The Noon spyware was found in mailings such as these examined by Kaspersky researchers.

Financial services. Bank phishing attacks in the second quarter were often carried out using emails offering various benefits and bonuses to customers of credit institutions due to the pandemic. Emails received by users contained a file with instructions or links to get more details. As a result, depending on the scheme, fraudsters could gain access to users’ computers, personal data, or authentication data for various services.

HR services. The weakening of the economy during the pandemic in a number of countries caused a wave of unemployment, and fraudsters did not miss this opportunity to strike. Kaspersky experts encountered various mailings that announced, for example, some amendments to the medical leave procedure, or surprised the recipient with the news about their dismissal. In some attachments, there was a Trojan-Downloader.MSOffice.SLoad.gen file. This Trojan is most often used for downloading and installing encryptors.

“When summarising the results of the first quarter, we assumed that COVID-19 would be the main topic for spammers and phishers for the past few months. And it certainly happened. While there was the rare spam mailing sent out without mentioning the pandemic, phishers adapted their old schemes to make them relevant for the current news agenda, as well as come up with new tricks,” comments Tatyana Sidorina, security expert at Kaspersky.

Kaspersky experts advise users to take the following measures to protect themselves from phishing:

– Always check online addresses in unknown or unexpected messages, whether it is the web address of the site where you are being directed, the link address in a message and even the sender’s email address, to make sure they are genuine and that the link in the message doesn’t hide another hyperlink.

–  If you are not sure that the website is genuine and secure, never enter your credentials. If you think that you may have entered your login and password on a fake page, immediately change your password and call your bank or other payment provider if you think your card details were compromised.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Lawyers Drags NLS to Court for Alleged Election Fraud, Data Violation

Published

on

Kindly share this post

Two Nigerian lawyers have sued promoters of the Nigerian Law Society (NLS) over allegations of electoral fraud and unlawful use of personal data.

Lawyers Drags NLS to Court for Alleged Election Fraud, Data Violation

The legal actions follow the recent election conducted by the NLS, a breakaway association formed as an alternative to the Nigerian Bar Association (NBA), to elect its national officers.

In one of the suits, marked FHC/ABJ/05/1506/2025 and filed before the Federal High Court in Abuja, a lawyer, Timothy Tersugh Ahua, is challenging the conduct of the election and the legitimacy of the electoral process.

Ahua named several NLS promoters, including prominent lawyers, as defendants.

They include Senior Advocates, Chief Mela Audu Nunghe, Dr. Ugoji Eze, Secretary of the NLS Electoral Committee, and Chief Bolaji, Chairman of the NLS.

Others named in the suit are Ferguson Chioma Blessing, Chief Emeka Ichoku, and Tejumola Adigun.

Citing provisions of the Federal High Court Civil Procedure Rules, Ahua is asking the court to declare that the NLS electoral process violated its constitution.

He is seeking a declaration that all unopposed candidates, including himself, be declared elected, as published by Dr. Tonye Clinton Jaja, the alternate Chairman of the NLS Electoral Committee.

Ahua claims he was duly nominated for the position of Secretary General but was unjustly excluded, accusing the defendants of hand-picking candidates in breach of the rules.

He further alleged that the exclusion caused him financial loss, reputational damage, and personal hardship, urging the court to correct what he described as a grave injustice.

In a separate suit before the Federal High Court in Abeokuta, another lawyer, Oluwadare Thomas, sued Chief Mela Nunghe, a Senior Advocate of Nigeria, Dr. Ugoji Eze, the Corporate Affairs Commission (CAC), the National Information Technology Development Agency (NITDA), and the Nigerian Data Protection Commission (NDPC), over alleged violation of his data privacy rights.

Thomas is asking the court to determine whether the use and publication of his personal data by NLS election officials without his consent amounts to a breach of Section 37 of the 1999 Constitution and the Nigeria Data Protection Act, 2023.

He also wants the court to consider whether the use of the NLS name for the election, despite a CAC notice and a pending suit, constitutes contempt of court and abuse of legal process.

He is seeking several declaratory and injunctive reliefs, including a court order restraining the continued use of his personal data and an order compelling NITDA and NDPC to investigate and sanction the respondents.

Thomas is also demanding N50m in compensation for the alleged unlawful processing and exposure of his personal information.


Kindly share this post
Continue Reading

News

NASRDA Celebrates Chief Owolabi Salis on His Historic Space Mission

Published

on

Kindly share this post

The National Space Research and Development Agency (NASRDA) has congratulated Chief Owolabi Salis on his successful space flight. He becomes the first person of Nigerian birth to travel to space.

Chief Salis privately funded his space mission, demonstrating the deep interest of Nigerians to participate in scientific, exploratory, tourism and commercial space activities. His achievement highlights new opportunities for private sector engagement in space Program.

This milestone brings significant international attention to Nigeria’s space program, capabilities, while positioning the nation among countries where citizens actively participate in space activities.

In a statement signed by Dr. Felix Ale, director, Media and Corporate Communications, NASRDA, stated that chief Salis’s successful mission represents one pathway for Nigerian space participation. “His achievement complements NASRDA’s ongoing efforts to expand access to space exploration for Nigerian citizens.

“NASRDA received notification of Chief Salis’s mission through our partner organization, Space Research and Exploration Agency (SERA), prior to the flight. His success demonstrates the expanding opportunities now available to Nigerians in the space sector.

“However, it must be emphasized that the NASRDA-SERA collaborative mission, announced in June 2024, remains on course for an upcoming Blue Origin flight. This program represents a different pathway, providing opportunities for broader Nigerian participation through open competition.

“Our collaborative mission will enable Nigerian citizens to participate in astronaut selection and contribute to the development of research proposals. Eligibility extends to all Nigerian citizens aged 18 and above through transparent, merit-based selection criteria.

“Research priorities for the NASRDA-SERA mission will also be determined through public input from Nigerian citizens. This approach ensures the mission addresses national priorities identified by Nigerian citizens,” the statement added.

The application portal for the NASRDA-SERA program will open in the coming weeks. Detailed application procedures will be announced prior to the portal’s activation.

NASRDA celebrates Chief Salis’s contribution to raising awareness about space exploration opportunities for Nigerians. His private investment demonstrates the practical commitment of Nigerian citizens to advancing our national space participation.

Chief Salis’s achievement marks a defining moment for Nigeria’s space ambitions. Nigeria now has both private citizens and government programs actively pursuing space exploration, positioning the nation as an active participant in the global space   economy.

For additional information regarding NASRDA programs or the SERA collaborative mission, contact the agency’s Media and Corporate Communication Department.


Kindly share this post
Continue Reading

News

NIA Questions Legality of Reps’ Financial Probe

Published

on

Kindly share this post

The Nigerian Insurers Association has urged the House Committee on Capital Market and Institutions to respect the constitutional separation of powers as it carries out a probe on over 20 insurance firms.

In a statement on Tuesday night, the Director General/Chief Executive Officer of NIA, Mrs Bola Odukale, said the decision of NIA and the affected firms to approach the court was to seek clarity on the constitutional limits of the House Committee’s probe.

It would be recalled that the House of Representatives on Monday is investigating no fewer than 25 insurance companies operating in the country for various financial infractions spanning financial reporting, claims settlement, premium remittance, and issuance of policies.

The Chairman, House Sub-Committee on Capital Market and Institutions, Kwamoti Laori, during a meeting with the management of the insurance companies at the National Assembly Complex in Abuja, said the meeting was convened following the receipt of a petition on infractions by the insurance companies.

In the statement, Odukale said, “The Association wishes to state unequivocally that all actions taken by the NIA and the affected member companies in response to the Committee’s invitations and pronouncements were based entirely on legal advice by its Solicitors. It was on the firm instruction of legal counsel that recourse was made to the courts.

“The objective of approaching the Court is to seek judicial guidance on the legality, propriety, and constitutional limits of the Committee’s intervention in order to safeguard institutional integrity, uphold regulatory independence, and ensure that legislative oversight remains within the bounds of law.

“The Court action seeks to determine whether the current posture of the Committee reflects an exercise of legislative judgment, which, by constitutional design, is the exclusive province of statutory regulators, such as the National Insurance Commission, Securities and Exchange Commission, Nigerian Exchange, Financial Reporting Council, Nigeria Data Protection Commission, and the National Information Technology Development Agency.

“This raises serious questions about legislative overreach and an erosion of the doctrine of separation of powers, a cornerstone of Nigeria’s constitutional democracy.”

Odukale maintained that the NIA was committed to lawful and constructive engagement with all arms of government, provided that such engagement respects the autonomy of statutory regulators and the boundaries established by the Constitution.

“The NIA will continue to provide its full support to all member companies while upholding the principles of legal compliance and sector-wide integrity,” Odukale concluded.

17 of the companies that went to court were represented by their lawyer, Mr Abimbola Kayode, at the meeting with the committee.


Kindly share this post
Continue Reading

Trending