Microsoft is implementing a big update to its account authentication mechanism beginning in February 2025.

Microsoft will make some changes to the way you sign in to your Microsoft account next month.

The new mechanism keeps users signed in across sessions unless they expressly sign out.

This is starting in February, you will be automatically signed in to your Microsoft account unless you sign out or utilize private browsing.

It’s a development that people should be aware of, particularly if they’re using public computers.

To better understand the change, look at how Microsoft currently handles sign-ins.

When you sign in to a Microsoft account through a web browser, a “stay signed in” prompt appears after you provide your username, password, and optional two-factor authentication verification.

Right now, when you sign in to a Microsoft account, you’ll be asked if you want to stay signed in, so you don’t have to sign in again the next time.

Microsoft’s change to automatically keep you signed in means you’ll have to use a private browsing window on public PCs or remember to sign out once your session ends, otherwise the account will remain signed on.

If you frequently use public computers with your Outlook or Microsoft account, it’s time to start getting used to logging out or using a private browsing session (which you should do anyway).

If you forget to sign out of your Microsoft account in February, you can always force it to be signed out across all browsers, applications, and devices other than Xbox consoles.

Microsoft’s most recent modification to its account sign-in process comes months after the company expanded passkey support to all of its customer accounts. You can generate passkeys for your Microsoft account by clicking this link, and you can use your face, fingerprint, PIN, or security key to sign in with a passkey. Check out our assessment of the top authenticator apps for Android and iOS.

When you decline, you remain signed in for the session only. When you accept it, you remain signed in even between sessions. Beginning early February, this prompt will be discontinued.

Here are the details:

The move, though a new global, is one that signs you out option and this affects all Microsoft services, including Outlook, OneDrive, Microsoft 365, and other applications that need login.

Security Implications

While the change may appear trivial at first appearance, it could have major implications for shared or public computer systems.

The next user may access the Microsoft account and connected services if you do not explicitly sign out.

One workaround is to use a browser’s private browsing mode on shared or public computers.

Sign-ins and other activities are only stored during the browsing session.

Once you close the browser, all data, including Microsoft account information, is lost.

Microsoft customers who neglect to sign out of systems that others have access to may initiate a global sign out. This global sign out option is one which forces a sign out on all systems where the user has ever signed into at any time.

Here are steps on how this works.

Visit this Microsoft help website.

Choose the “sign in” button on the page. A new page appears, prompting you to sign in if you haven’t previously.

Scroll down the additional security options page until you reach the sign out everywhere section.

Activate the sign out everywhere link.

To confirm the prompt, select “sign out”.

Microsoft clears everyone that this could take up to 24 hours. In other words, there is a 24-hour window during which others can still access Microsoft account-related services on different machines.

The change mostly affects Microsoft customers who login in to their accounts from public or shared devices. Others may also be affected, albeit to a lesser degree.

Dark web threads discussing crypto-drainers – malware designed to swiftly drain cryptocurrency wallets – saw a significant rise in 2024, as revealed by the latest Kaspersky Security Bulletin. Kaspersky also reported a 40% spike in corporate database ads on a prominent dark web forum, highlighting cybercriminals’ growing focus on data breaches.

Additional trends include a shift of cybercriminals from Telegram back to forums, the proliferation of stealers and drainers via Malware-as-a-Service, a rise in various types of cyberthreats targeting the Middle East, and more.

A surge in interest for crypto-drainers

In 2024, Kaspersky Digital Footprint Intelligence experts saw a notable surge of interest in crypto-drainers across dark web markets. A drainer is a type of malware that emerged around three years ago and is designed to trick its victims into authorising fraudulent transactions to steal funds from their wallets.

Common methods include fake airdrops, phishing sites, malicious browser extensions, deceptive ads, malicious smart contracts, and fake NFT marketplaces.

The number of dark web threads discussing drainers increased by 135%, from just 55 in 2022 to 129 in 2024. In these threads, cybercriminals discuss various topics, ranging from buying and selling this type of malicious software to assembling teams for distribution, and beyond.

“In light of this trend, the interest of cybercriminals in crypto-drainers and related attacks is likely to grow further in 2025,” says Alexander Zabrovsky, a security expert at Kaspersky Digital Footprint Intelligence. “This means crypto enthusiasts need to be more vigilant than ever, adopting robust crypto security measures.

“Meanwhile, companies should focus on educating their customers and employees while actively monitoring their online presence to reduce the risk of successful attacks. Drainers often employ social engineering tactics to ultimately steal funds. They may be exploiting well-known wallet and exchange brands to lure victims into revealing their wallet information or making fraudulent transactions.

Regularly searching for brand mentions on search engines, social media, and marketplaces is essential. If any phishing or fraudulent sites are identified, they can be taken down promptly, preventing potential victims from falling prey to these scams. Utilising dedicated tools can greatly enhance this monitoring process.”

The rise in advertisements for alleged data breaches

Other threats expected to gain momentum in 2025, include data breaches and leaks. Kaspersky researchers have observed a rise in corporate database advertisements on one of the popular shadow forums.

Specifically, the number of posts buying and selling databases increased by 40% between August and November 2024, compared to the same period the previous year. While some of this growth may partially stem from reposting of older leaks, cybercriminals are clearly interested in distributing leaked data – whether new or old.

“Not every advertisement of a data breach on the dark web stems from a genuine incident. Some ‘offers’ may simply be well-marketed materials. For example, certain databases might combine publicly available information or previously leaked data, presenting it as breaking news.

By making such claims, cybercriminals can generate publicity, create buzz, and tarnish the reputation of the targeted company simply by announcing a data breach. This underscores the growing importance of monitoring corporate mentions and assets on the dark market, allowing for proactive defense and immediate response,” elaborated Zabrovsky.

Given the rising trend of supply chain and similar attacks, 2025 is anticipated to witness an increase in data breaches overall, particularly those stemming from attacks on major companies’ contractors.

Other emerging trends on the dark web market in 2025 include:

• Escalating threat landscape in the Middle East: The region is witnessing an increase in hacktivism driven by ongoing geopolitical tensions. If these tensions do not subside in 2025, hacktivism is expected to intensify further. Furthermore, Kaspersky experts anticipate a continued rise in ransomware attacks in the Middle East, given that the number of ransomware victims increased from an average of 28 per half-year in 2022-2023 to 45 in the first half of 2024.
• Migration from Telegram to dark web forums: Despite a spike in cybercriminal activity on Telegram in 2024, the shadow community is expected to shift back to forums. Telegram channels are increasingly being banned, as reported by their administrators, driving this migration.
• Increase in high-profile law enforcement operations against cybercrime groups: 2024 was a significant year in the global high-profile fight against cybercrime. Kaspersky experts anticipate that 2025 will bring an increase in arrests and takedowns of cybercriminal group infrastructures and forums that receive publicity. In turn, in response to the successful operations of 2024, threat actors are likely to shift their tactics, migrating to invitation-only forums.
• Fragmentation of ransomware groups: Ransomware groups may fragment into smaller, independent units, making them harder to track. This decentralisation allows cybercriminals to operate more flexibly while staying under the radar of law enforcement and cybersecurity firms.
• Stealers and drainers will likely see a rise in promotion via Malware-as-a-Service model: Moreover, various data and credentials stolen with the use of these types of malware are expected to be increasingly sold on shadow forums.

Konga’s annual Jara campaign has sparked excitement among Nigerian shoppers, offering timely discounts of up to 50% across various product categories.

The initiative, themed “Confam New Year Deals,” has emerged as a vital lifeline for consumers navigating the financial challenges typical of January.

Market analysis shows a significant surge in essential household purchases, with electronics, home appliances, and FMCG items leading the sales charts.

Data from the first two weeks of the campaign reveals that home appliances and electronics account for 45% of total sales. Groceries and FMCG follow closely at 30%, while fashion and lifestyle products make up 25% of purchases.

“Konga Jara couldn’t have come at a better time,” says Mrs. Folake Adeyemi, a Lagos-based civil servant.

“With school fees and other January commitments, the discounts on groceries have helped me maintain our family’s standard of living without breaking the bank.”

Similarly, Mr. Chidubem Okafor, a small business owner in Abuja, notes, “I’ve been able to restock my shop with quality products at much lower prices. The authenticity of products on Konga gives me confidence in my purchases.”

The campaign’s success reflects growing consumer trust in online shopping platforms that prioritize genuine products and competitive pricing.

Shoppers have particularly appreciated the convenience of accessing these deals both online at www.konga.com and offline across Konga’s nationwide retail stores.

Beyond mere discounts, the initiative demonstrates Konga’s understanding of the Nigerian consumer’s needs, especially during traditionally challenging financial periods.

The combination of competitive pricing, product authenticity, and accessible shopping channels has created a winning formula for both the business and its customers.

As the campaign continues, shoppers are encouraged to take advantage of these substantial savings across all categories.

Whether shopping for household essentials, electronics, or fashion items, Konga Jara offers an opportunity to make significant savings while ensuring access to genuine, high-quality products through Nigeria’s trusted e-commerce platform.