Connect with us

News

LinkedIn Ranks Top in List of Brands Most Likely to be Imitated in Phishing Attempts – Report

Published

on

Kindly share this post

Check Point Research, the Threat Intelligence arm of Check Point Software Technologies Ltd. and a leading provider of cyber security solutions globally, has published its Brand Phishing Report for Q1 2022.

The report highlights the brands which were most frequently imitated by cybercriminals in their attempts to steal individuals’ personal information or payment credentials during January, February and March.

Social media network, LinkedIn, dominated the rankings for the first time ever, accounting for more than half (52%) of all phishing attempts during the quarter.

This represents a dramatic 44% uplift from the previous quarter, where the professional networking site was in fifth position accounting for only 8% of phishing attempts.

LinkedIn overtook DHL as the most targeted brand, which is now in second position and accounted for 14% of all phishing attempts during the quarter.

The latest report highlights an emerging trend toward threat actors leveraging social networks, now the number one targeted category ahead of shipping companies and technology giants such as Google, Microsoft and Apple.

As well as LinkedIn being the most targeted brand by a considerable margin, WhatsApp maintained its position in the top ten, accounting for almost 1 in 20 phishing-related attacks worldwide.

The report highlights a particular example where LinkedIn users are contacted via an official-looking email in an attempt to lure them to click on a malicious link. Once there, users would be again prompted to log-in via a fake portal where their credentials would be harvested.

Shipping is now the second most targeted category, with threat actors continuing to take advantage of the general rise in e-commerce by targeting consumers and shipping companies directly.

DHL is second to LinkedIn, accounting for 14% of phishing attempts; FedEx has moved from seventh position fifth, now accounting for 6% of all phishing attempts; and Maersk and AliExpress have entered the top ten list for the first time.

The report highlights one particular phishing strategy that used Maersk-branded emails to encourage the download of spoof transport documents, infecting workstations with malware.

“These phishing attempts are attacks of opportunity, plain and simple. Criminal groups orchestrate these phishing attempts on a grand scale, with a view to getting as many people to part with their personal data as possible,” said Omer Dembinsky, Data Research Group Manager at Check Point Software.

“Some attacks will attempt to gain leverage over individuals or steal their information, such as those we’re seeing with LinkedIn. Others will be attempts to deploy malware on company networks, such as the fake emails containing spoof carrier documents that we’re seeing with the likes of Maersk.”

He continued: “If there was ever any doubt that social media would become one of the most heavily targeted sectors by criminal groups, Q1 has laid those doubts to rest. While Facebook has dropped out of the top ten rankings, LinkedIn has soared to number one and has accounted for more than half of all phishing attempts so far this year.

“The best defense against phishing threats, as ever, is knowledge. Employees in particular should be trained to spot suspicious anomalies such as misspelled domains, typos, incorrect dates and other details that can expose a malicious email or text message. LinkedIn users in particular should be extra vigilant over the course of the next few months.”

In a brand phishing attack, criminals try to imitate the official website of a well-known brand by using a similar domain name or URL and web-page design to the genuine site.

The link to the fake website can be sent to targeted individuals by email or text message, a user can be redirected during web browsing, or it may be triggered from a fraudulent mobile application. The fake website often contains a form intended to steal users’ credentials, payment details or other personal information.

Top phishing brands in Q1 2022

Below are the top brands ranked by their overall appearance in brand phishing attempts:

1. LinkedIn (relating to 52% of all phishing attacks globally)

2. DHL (14%)

3. Google (7%)

4. Microsoft (6%)

5. FedEx (6%)

6. WhatsApp (4%)

7. Amazon (2%)

8. Maersk (1%)

9. AliExpress (0.8%)

10. Apple (0.8%)

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

PalmPay, Jumia Reward Users in Festive Campaign

Published

on

Kindly share this post

This holiday season just got a whole lot more exciting! PalmPay, one of Africa’s leading fintech platforms, operates Nigeria’s most used mobile wallet and has teamed up with Jumia, the continent’s e-commerce giant, to launch a festive campaign that’s all about convenience, rewards, and enhancing your shopping experience.

Running from December 11th to 28th, 2024, this holiday campaign is set to reward shoppers who use the new “Pay with PalmPay” feature on Jumia with cash prizes. Every purchase made using the direct payment method automatically enters participants into a draw, giving them a chance to win exciting cash rewards while enjoying the seamless shopping and payment process.

A Strategic Partnership To Enhance Digital Payments

The integration of the “Pay with PalmPay Wallet” feature on Jumia marks a major milestone in the partnership between the two industry leaders.

Speaking at the media announcement, Mr. Chika Nwosu, Managing Director of PalmPay, highlighted the broader mission driving this collaboration: “We are thrilled to join forces with Jumia to redefine convenience for shoppers. At PalmPay, our mission has always been to drive economic empowerment through accessible and user-friendly financial services. This partnership is a natural step forward in achieving that goal.”

Beyond the holidays, this partnership with Jumia m,k is a signal of bigger things to come. Mr. Chika added: “This is more than just about payments—it’s about creating value for our customers. We are excited about the opportunities this partnership will unlock in 2025, including campaigns and innovative initiatives that will further transform the online shopping landscape.”

Sunil Natraj, CEO of Jumia Nigeria, highlighted the shared vision between both companies, stating: “At Jumia, we are dedicated to creating value for our customers by ensuring a convenient, reliable, and secure shopping experience. This partnership with PalmPay strengthens our commitment to enhancing the digital payments within our platform. By integrating PalmPay, we are providing more options for customers to access affordable and quality goods with the convenience of cashless transactions.”

How to Join the Holiday Fun

Participating in the campaign is simple. When shopping on Jumia, select the “Pay with PalmPay” option at checkout, and your entry into the draw is automatic. It’s that easy!

Bonus Entry: Share a screenshot of your purchase on X (formerly Twitter) using the hashtag #PalmPayXJumia to increase your chances of winning. Additional winners will be selected from participants engaging with the campaign on Twitter.

Whether you are shopping for gifts, or gadgets this festive season, PalmPay and Jumia are making sure your experience is not only seamless but also rewarding.

To learn more about the campaign, stay tuned to the official  X accounts (formerly Twitter) of @palmpay_ng and @JumiaNigeria. for updates, announcements, and more chances to win.


Kindly share this post
Continue Reading

News

Corruption: ICPC Threatens Sanctions as 330 MDAs Fail Financial, Governance Tests

Published

on

Kindly share this post

Independent Corrupt Practices and Other Related Offenses Commission (ICPC), has revealed that none of the Ministries, Departments, and Agencies (MDAs), in the country complied fully with ethical standards, policies, and anti-corruption measures in the passing year.

Corruption: ICPC Threatens Sanctions as 330 MDAs Fail Financial, Governance Tests

This was following the findings from the Commission’s Ethics and Integrity Compliance Scorecard (EICS) for the MDAs.

The Commission warned that henceforth, non-compliant MDAs will face necessary actions, including enforcement, to ensure adherence to government directives.

According to the EICS scorecard released on Thursday in Abuja by Demola Bakare, ICPC spokesperson, no MDA out of 330 MDAs that were assessed through physical deployment by ICPC teams achieved full compliance.

The EICS serves as a preventive tool used to assess and enhance the compliance of MDAs with ethical standards, policies, and anti-corruption measures.

Findings from the report indicated that no MDA achieved full compliance, while 29.55 per cent of MDAs captured attained substantial compliance, and 51.62 per cent had partial compliance.

The report also observed that 15.91 per cent showed poor compliance, while 292 per cent were non-compliant.

According to the report, common gaps included a lack of whistle-blower policies, strategic plans, and effective stock verification units, adding that many MDAs failed to conduct any forms of system studies or render financial and audit reports.

Commenting on the report, Bakare noted: “This year, 2024, the tool covered 323 responsive MDAs, with 15 MDAs non-responsive and categorised as high corruption risk.

“It is imperative to inform you that this initiative has yielded some positive and value-driven impacts, and these are, but not limited to, increased awareness and compliance with anti-corruption measures, enhanced competition among MDAs to meet criteria, and improved procurement processes and data reliability.

“The Commission recognises the MDAs with substantial compliance and will continue deploying these tools to promote integrity and accountability.

“Non-compliant MDAs will face necessary actions, including enforcement, to ensure adherence to government directives. We are certain that these efforts will continue to underline ICPC’s dedication to enhancing good governance and preventing corruption.”


Kindly share this post
Continue Reading

News

Dangote Refinery Denies Liquidity Challenges, Dismisses NNPCL’s $1Bn Loan Claim

Published

on

Kindly share this post

Dangote Petroleum Refinery and Petrochemicals (DPRP) has dismissed claims that the Nigerian National Petroleum Company Limited (NNPCL) used a $1 billion loan secured through a crude forward sale agreement to support the refinery during a liquidity crisis.

Dangote Refinery Denies Liquidity Challenges, Dismisses NNPCL’s $1Bn Loan Claim

In a statement on Wednesday, Anthony Chiejina, company’s chief branding and communications officer, said the NNPCL’s stance was a distortion of the facts.

“We would like to clarify that this is a misrepresentation of the situation as $1bn is just about 5% of the investment that went into building the Dangote Refinery,” Chiejina said.

Chiejina stated that the refinery’s decision to enter into a partnership with the NNPCL was based on the recognition of “their strategic position in the industry as the largest offtaker of Nigerian crude” and at the time, the sole supplier of petrol into Nigeria.

“We agreed on the sale of a 20% stake at a value of $2.76 billion. Of this, we agreed that they will only pay $1 billion while the balance will be recovered over a period of 5 years through deductions on crude oil that they supply to us and from dividends due to them,” Chiejina said.

“If we were struggling with liquidity challenges we wouldn’t have given them such generous payment terms. As at 2021 when the agreement was signed, the refinery was at the pre-commission stage.”

According to the statement, the agreement would have been cash-based rather than credit-driven if the refinery struggled with liquidity issues.

The refinery’s spokesman said the NNPCL was subsequently unable to supply the agreed 300,000 barrels a day of crude (bpd).

He stated that the shortfall was because the NNPPC “had committed a greater part of their crude cargoes to financiers with the expectation of higher production which they were unable to achieve”.

“We subsequently gave them a 12-month period for them to pay cash for the balance of their equity given their inability to supply the agreed crude oil volume,” he said.

“NNPCL failed to meet this deadline which expired on June 30th 2024. As a result, their equity share was revised down to 7.24%. These events have been widely reported by both parties,” he said.


Kindly share this post
Continue Reading

Trending