Connect with us

E-Business

Sophos Identifies Coronavirus Scam email, Lists Measures to Avoid it 

Published

on

Kindly share this post

Cybercrooks love a crisis, because it gives them a believable reason to contact you with a phishing scam, Sophos has said, as it alerts individuals and businesses on the Coronavirus “safety measures” email is a phishing scam.

Sophos Identifies Coronavirus Scam email, Lists Measures to Avoid it

Sophos evolves to meet every new challenge, protecting more than 400,000 organizations of all sizes in more than 150 countries from today’s most advanced cyber threats.

Powered by SophosLabs, its cloud-native and AI-enhanced solutions are able to adapt and evolve to secure endpoints and networks against never-before-seen cybercriminal tactics and techniques.

Sophos Security Team reported of the current scam that uses the coronavirus to lure unsuspecting businesses and people with the email which carries the logo of the World Health Organization and states:

.Go through the attached document on safety measures regarding the spreading of corona virus.

.Click on the button below to download

.Symptoms common symptoms include fever, coughcshortness of breath and breathing difficulties.

Sophos said that fortunately, at least for fluent speakers of English, the criminals have made numerous spelling and grammatical mistakes that act as warning signs that this is not what it seems.

“The link you’re asked to click on is similarly, and fortunately, dubious.

“Firstly, it seems to be a compromised music site with a weird name that doesn’t have any obvious connection to any well-known health organisation; secondly, it is an HTTP site, not an HTTPS site, which is sufficiently unusual these days to be suspicious in its own right.

“Nevertheless, the scam page itself is incredibly simple – it can’t have taken the crooks more than a few minutes to put together – and visually effective.

“The fake page consists of the official, current home page of the World Health Organisation (WHO) with an unassuming popup form on top of it.

“It doesn’t just look like the WHO’s page in the background, it is the WHO’s page, rendered in a frame that’s embedded in the fake site:

“You can see why someone who’s nervous about the coronavirus issue, or who has friends and family in the main areas of infection, or who wants to do the right thing by learning more about preventing the spread of the disease…

“…might fill in the form, perhaps because they are feeling pressurised by (or not thinking clearly because of) the subject matter.

“Indeed, many companies have already sent emails to their staff to offer advice, so reading additional information that is allegedly from the WHO sounds like a sensible and responsible thing to do.

“Of course, if you put in your email address or your password and click through, you’ll be submitting the filled-in web form to the crooks.

“Worse still, you’ll be submitting it over an unencrypted connection.

“So anyone else on the same network as you, for example in your hotel lobby or the coffee shop, could potentially capture your network traffic and see the username and password you just put in.

“Once you’ve clicked the [Verify] button, the crooks simply redirect you to the real WHO site at who DOT int, which looks just like the previous page you were on, minus the popup form…

“…with the rather obvious exception that the address bar now looks (and is) correct, displaying the genuine WHO website name, showing a padlock and – if you click through and view the web certificate – a certificate that shows up as issued to the WHO itself.

Sophos also offered measures on what to do about it:

Never let yourself feel pressured into clicking a link in an email. Most importantly, don’t act on advice you didn’t ask for and weren’t expecting. If you are genuinely seeking advice about the coronavirus, do your own research and make your own choice about where to look.

Don’t be taken in by the sender’s name. This scam says it’s from “World Health Organization”, but the sender can put any name they like in the From: field.

Look out for spelling and grammatical errors. Not all crooks make mistakes, but many do. Take the extra time to review messages for telltale signs that they’re fraudulent – it’s bad enough to get scammed at all without realising afterwards that you could have spotted the fraud up front.

Check the URL before you type it in or click a link. If the website you’re being sent to doesn’t look right, stay clear. Do your own research and make your own choice about where to look.

Never enter data that a website shouldn’t be asking for. There is no reason for a health awareness web page to ask for your email address, let alone your password. If in doubt, don’t give it out.

If you realise you just revealed your password to imposters, change it as soon as you can. The crooks who run phishing sites typically try out stolen passwords immediately (this process can often be done automatically), so the sooner you react, the more likely you will beat them to it.

Never use the same password on more than one site. Once crooks have a password, they will usually try it on every website where you might have an account, to see if they can get lucky.

Turn on two-factor authentication (2FA) if you can. Those six-digit codes that you receive on your phone or generate via an app are a minor inconvenience to you, but are usually a huge barrier for the crooks, because just knowing your password alone is not enough.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Ride the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas

Published

on

Kindly share this post

Temu is set to enchant the holiday season with its unique blend of green magic, bringing a touch of festive wonder to Christmas celebrations. The initiative, themed “Ride the ‘Wicked’ Wave,” promises to deliver an unforgettable experience, combining technology, entertainment, and commerce to create a magical holiday atmosphere.

Temu

Temu’s green magic initiative aims to captivate audiences with a variety of festive offerings, from fashion to home decor, handmade crafts, beauty items, chic clothes, shoes, and more.

The platform’s innovative approach ensures that customers can enjoy a seamless shopping experience, with free shipping on all orders1.

As part of the celebration, Temu has also introduced a magical winter Christmas backdrop, perfect for creating a festive ambiance at home.

This backdrop, made from high-quality polyester, is designed to bring the spirit of the season to life, making it an ideal addition to any holiday decor.

With its commitment to providing exceptional products and services, Temu continues to set new standards in the e-commerce industry, ensuring that customers can enjoy the magic of Christmas in style


Kindly share this post
Continue Reading

E-Business

Kaspersky Cybersecurity Experts Warn of Evolving Holiday Scams

Published

on

Kindly share this post

With the holiday season here, it’s not only a time for magic and celebration but also a prime opportunity for fraudsters to exploit the festive rush for gifts and bargains.

Kaspersky Cybersecurity Experts Warn of Evolving Holiday Scams

Amid the sparkle of year-end celebrations, cybersecurity experts at Kaspersky have identified several prominent scams targeting consumers across various regions and languages.

Fake holiday shops

Deceptive online stores mimic the look and feel of legitimate e-commerce sites, offering seasonal items such as decorations, gifts, and even trees at steep discounts.

These sites often appear highly localised, adapting their language and currency based on the user’s geographic location, leveraging data extracted from browsers.

Victims typically encounter these stores by following links in ads or pop-ups.

These sites aim to steal funds. Often, these fraudulent stores exist only for a short period, as they get flagged by the vendors of goods.

Free mobile data offer

This scam plays on the allure of free services, claiming to provide free mobile data valid across all major telecom providers.

In order to receive the free data, victims are required to share the promotion link with 10–15 contacts via WhatsApp, ensuring the scam spreads exponentially.

After sharing, victims are prompted to enter their personal details — name, phone number, and email — into a form.

The collected data is then sold on the Dark Web or used in other fraudulent activities.

In some cases, victims unknowingly download malware that compromises their devices, leading to further exploitation.

Holiday payments on behalf of government agencies

Fraudsters impersonate government authorities, promising fictitious payments in celebration of the holidays.

This scam has been reported in several African countries, including Kenya and Nigeria.

To receive payment, victims are directed to fill out a survey which requires personal details like name and phone number.

Once the survey is completed the user is asked to share the link to the announcement with their connections via WhatsApp.

These details are collected and added to fraudulent databases, then sold to third parties or used for phishing attacks and identity theft.

This scam exploits trust in government systems and the festive spirit of giving.

Christmas recipe scam

This scam begins with a seemingly harmless email promoting a holiday cake recipe.

Victims are encouraged to pay a small fee to access the recipe.

Once payment is made, the victim’s credit card information is stolen. The fraudsters also collect other personal information essential for accessing banking services.

“Holiday scams are not a new phenomenon, but they have evolved to become increasingly sophisticated, leveraging regional traditions and technology to exploit unsuspecting victims.

The rush of the holidays makes people more vulnerable — they’re distracted, eager to grab a deal, or trust promotions that align with festive themes. Cybercriminals are not just stealing money — they’re building massive databases of personal information that fuel future fraudulent schemes.

The holiday season is a time for joy and giving, but users need to remain vigilant to ensure they’re not unknowingly giving fraudsters the tools to exploit them further,” said Olga Svistunova, Senior Web Content Analyst at Kaspersky.

 

 

 

 

 

 


Kindly share this post
Continue Reading

E-Business

Hackers Seize NBS Newly Redesigned Website

Published

on

Kindly share this post

Cybercriminals have persisted in targeting Nigerian government websites, with the most recent attack on the National Bureau of Statistics (NBS).

Hackers Seize NBS Newly Redesigned Website

The NBS confirmed the development in a brief statement posted on its X (formerly Twitter) account

It said that its newly redesigned official website has been hacked.

The NBS disclosed the incident and assured the public that efforts are underway to recover the website.

It urged the public to disregard any messages or reports posted until the full recovery of its website.

The statement on X read: “This is to inform the public that the NBS website has been hacked, and we are working to recover it. Please disregard any message or report posted until the website is fully restored.”

The NBS plays a vital role in Nigeria’s development, serving as the official statistical agency responsible for collecting, analyzing, and disseminating statistical data on the country’s economy, governance, and development

This marks the latest in a series of attacks on Nigerian government websites, a trend that has been ongoing for some years.

From government ministries to officials, cyberattacks in Nigeria have surged to alarming levels, with even financial institutions falling victim.

The Nigerian Communications Commission (NCC) and National Information Technology Development Agency (NITDA) frequently issue warnings of cybercriminals targeting individuals, government entities, banks, and telecom companies.


Kindly share this post
Continue Reading

Trending