E-Business
Sophos Identifies Coronavirus Scam email, Lists Measures to Avoid it
Cybercrooks love a crisis, because it gives them a believable reason to contact you with a phishing scam, Sophos has said, as it alerts individuals and businesses on the Coronavirus “safety measures” email is a phishing scam.
Sophos evolves to meet every new challenge, protecting more than 400,000 organizations of all sizes in more than 150 countries from today’s most advanced cyber threats.
Powered by SophosLabs, its cloud-native and AI-enhanced solutions are able to adapt and evolve to secure endpoints and networks against never-before-seen cybercriminal tactics and techniques.
Sophos Security Team reported of the current scam that uses the coronavirus to lure unsuspecting businesses and people with the email which carries the logo of the World Health Organization and states:
.Go through the attached document on safety measures regarding the spreading of corona virus.
.Click on the button below to download
.Symptoms common symptoms include fever, coughcshortness of breath and breathing difficulties.
Sophos said that fortunately, at least for fluent speakers of English, the criminals have made numerous spelling and grammatical mistakes that act as warning signs that this is not what it seems.
“The link you’re asked to click on is similarly, and fortunately, dubious.
“Firstly, it seems to be a compromised music site with a weird name that doesn’t have any obvious connection to any well-known health organisation; secondly, it is an HTTP site, not an HTTPS site, which is sufficiently unusual these days to be suspicious in its own right.
“Nevertheless, the scam page itself is incredibly simple – it can’t have taken the crooks more than a few minutes to put together – and visually effective.
“The fake page consists of the official, current home page of the World Health Organisation (WHO) with an unassuming popup form on top of it.
“It doesn’t just look like the WHO’s page in the background, it is the WHO’s page, rendered in a frame that’s embedded in the fake site:
“You can see why someone who’s nervous about the coronavirus issue, or who has friends and family in the main areas of infection, or who wants to do the right thing by learning more about preventing the spread of the disease…
“…might fill in the form, perhaps because they are feeling pressurised by (or not thinking clearly because of) the subject matter.
“Indeed, many companies have already sent emails to their staff to offer advice, so reading additional information that is allegedly from the WHO sounds like a sensible and responsible thing to do.
“Of course, if you put in your email address or your password and click through, you’ll be submitting the filled-in web form to the crooks.
“Worse still, you’ll be submitting it over an unencrypted connection.
“So anyone else on the same network as you, for example in your hotel lobby or the coffee shop, could potentially capture your network traffic and see the username and password you just put in.
“Once you’ve clicked the [Verify] button, the crooks simply redirect you to the real WHO site at who DOT int, which looks just like the previous page you were on, minus the popup form…
“…with the rather obvious exception that the address bar now looks (and is) correct, displaying the genuine WHO website name, showing a padlock and – if you click through and view the web certificate – a certificate that shows up as issued to the WHO itself.
Sophos also offered measures on what to do about it:
Never let yourself feel pressured into clicking a link in an email. Most importantly, don’t act on advice you didn’t ask for and weren’t expecting. If you are genuinely seeking advice about the coronavirus, do your own research and make your own choice about where to look.
Don’t be taken in by the sender’s name. This scam says it’s from “World Health Organization”, but the sender can put any name they like in the From: field.
Look out for spelling and grammatical errors. Not all crooks make mistakes, but many do. Take the extra time to review messages for telltale signs that they’re fraudulent – it’s bad enough to get scammed at all without realising afterwards that you could have spotted the fraud up front.
Check the URL before you type it in or click a link. If the website you’re being sent to doesn’t look right, stay clear. Do your own research and make your own choice about where to look.
Never enter data that a website shouldn’t be asking for. There is no reason for a health awareness web page to ask for your email address, let alone your password. If in doubt, don’t give it out.
If you realise you just revealed your password to imposters, change it as soon as you can. The crooks who run phishing sites typically try out stolen passwords immediately (this process can often be done automatically), so the sooner you react, the more likely you will beat them to it.
Never use the same password on more than one site. Once crooks have a password, they will usually try it on every website where you might have an account, to see if they can get lucky.
Turn on two-factor authentication (2FA) if you can. Those six-digit codes that you receive on your phone or generate via an app are a minor inconvenience to you, but are usually a huge barrier for the crooks, because just knowing your password alone is not enough.
E-Business
Kaspersky, AFRIPOL Strengthen Partnership in Combating Cybercrime
To further enhance global efforts to combat cyber offenses, Kaspersky and AFRIPOL have signed a cooperation agreement in preventing and fighting cybercrime.
Covering a period of five years, the document formalises and facilitates cooperation between the company and the law enforcement agency in sharing threat intelligence data on the latest cybercriminal activities.
The landscape of cyberthreats in Africa has constantly been evolving, with the continent having been especially susceptible to industrial threats. The region, in particular, has the highest share of Industrial Control Systems (ICS) computers on which malicious objects were blocked by Kaspersky solutions, compared to other regions.
Africa’s vigorous cyberthreat environment requires enhanced collaboration of the parties concerned to safeguard against potential risks.
Strengthening the existing relationship between the two organisations, the agreement provides for enhanced data exchange on cyberthreats and cybercrime trends, with Kaspersky handing over such data to AFRIPOL for the further criminal intelligence analysis by the organisation.
Another aspect of collaboration includes the provision of assistance, know-how and technical knowledge in information security analysis by Kaspersky’s vastly experienced teams of experts.
The official signing ceremony took place at AFRIPOL’s headquarters in Algiers on November 18, with the agreement signed by Kaspersky founder and CEO, Eugene Kaspersky and AFRIPOL’s Acting Executive Director, Ambassador Jalel Chelba.
Kaspersky founder and CEO, Eugene Kaspersky, noted: “An effective fight against cybercrime is inconceivable without cooperation. Our company has always put collaborative effort first – sharing its expertise with the widest range of stakeholders: the security expert community, law enforcement agencies, and also the general public to empower them with knowledge about acute cyberthreats.
“Hence, by advancing our cooperation with AFRIPOL and by equipping the agency with both the information and technology required for responding to emerging cyberthreats, we hope to enhance our contribution in fostering greater cyber-resilience and a safer cyberspace for all.”
AFRIPOL Acting Executive Director Ambassador Jalel Chelba stated: “This agreement with Kaspersky represents a major step forward in strengthening Africa’s digital defenses.
By leveraging Kaspersky’s expertise and resources, we are not only enhancing AFRIPOL’s ability to counter cyber threats, but also contributing to the protection of a secure digital space for all African citizens.
This collaboration brings substantial added value to both our organisations: it strengthens AFRIPOL’s operational framework in combating cybercrime, while allowing Kaspersky to play a key role in the digital security of a strategically important continent in terms of cybersecurity. Together, we are taking a significant step towards resilience and digital trust in Africa, by mobilising the best of both partners.”
Kaspersky and AFRIPOL have a long record of joint cooperation projects. The two organisations have been active contributors to the assessment of the African threat landscape, while also being active participants in INTERPOL-led actions to disrupt cybercrime on the African continent, namely Africa Cyber Surge Operation and Africa Cyber Surge Operation II.
The two organisations have also been advocating for greater digital trust, with AFRIPOL having endorsed Kaspersky’s first Transparency Center in the African region in Rwanda. Learn more at the website.
E-Business
CNCF, Andela Partner to Train Over 20,000 African Tech Professionals
The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud-native software, along with Linux Foundation Education, the training and certification arm of the Linux Foundation, has partnered with Andela, home to the world’s largest private tech talent marketplace, to train 20,000 to 30,000 African technologists in cloud native basics to enable them to excel in jobs globally as cloud-native development grows.
The training—done at no cost to the participants—will begin next year and unfold over two to three years. Participants will have the opportunity to train for the Kubernetes and Cloud Native associate (KCNA) certification, which demonstrates a user’s foundational knowledge and skills in Kubernetes and the wider cloud native ecosystem, and the Certified Kubernetes Application Developer (CKAD), which certifies that users can design, build, configure, and expose cloud native applications for Kubernetes.
“This partnership showcases the global impact of CNCF’s education programs. By standardizing cloud native knowledge, developers across the globe can confidently work toward certifications that will enable them to land developer positions both within their own countries and globally,” said Chris Aniszczyk, CTO at the CNCF.
“By partnering with Andela, which has a long history of training technologists in Africa, we see great opportunity in providing our training to communities that may otherwise not have access. Together, we can create a win-win for companies that need workers and workers that need opportunities.”
According to Google’s Africa Developer Ecosystem Report 2021, the increased global demand for remote tech talent, which was accelerated by the pandemic, created more remote employment opportunities for African developers. Now, 38% of African software developers work for at least one company based outside the continent.
“We are excited to partner with CNCF to extend training and, ultimately, enhance job opportunities for African workers. The continent is emerging as one of the most important markets in the world.
“It has the fastest-growing population of developers, and its young workforce will be key to solving the tech talent shortage,” said Carrol Chang, Andela CEO. “Organizations are looking for talent with advanced skill sets like AI and cloud-native, and this particular skill set is a perfect addition to the Andela marketplace.”
Training participants will take six to nine months to achieve the KCNA and CKAD certifications and will be selected from Andela’s talent marketplace, which includes 150,000 technology professionals globally, with a large percentage from Africa. Andela’s talent marketplace in Africa spans 49 countries, including Nigeria, Kenya and Ghana.
The company fosters an active community for marketplace participants and has worked with numerous companies, including Google, Meta, Microsoft, AWS, and Nvidia, to train talent in technologies that offer vast workplace opportunities.
The need for cloud-native developers continues to increase and a recent study by CNCF revealed that almost 55% of developers landed a new job as a result of training and certification courses.
Almost 7 in 10 (67%) said it made them feel more engaged and fulfilled in their work. However, 8 in 10 (81%) also said cost prevented them from completing certifications.
“As a non-profit focused on growing open source and cultivating the IT talent needed to sustain it, partnerships – like this one with Andela – help us train and certify underrepresented groups, which is crucial to both our long-term success and amplify our impact,” said Clyde Seepersad, Senior Vice President and General Manager of Linux Foundation Education.
E-Business
Breaking Barriers: QNET’s Product Expo Opens Doors for Nigerian Entrepreneurs
QNET, a global lifestyle and wellness-focused direct-selling company, in partnership with Transblue Nigeria Ltd, hosted a successful Product Expo at Anchor Events Place, Ikeja, Lagos.
The event showcased QNET’s diverse product line, addressing misconceptions and empowering Nigerian entrepreneurs.
Mr. Akeem Ajisafe, Managing Director of Transblue Nigeria Ltd, emphasized the expo’s significance: “This is our opportunity to showcase our products, tackle misconceptions, and educate people about QNET’s direct-selling approach.”
QNET’s partnership with Transblue has yielded multiple workshops and exhibitions, promoting economic viability and youth empowerment.
Ajisafe highlighted the benefits: “QNET has contributed significantly to Nigeria’s tax revenue, and our programs teach entrepreneurship skills, enabling individuals to build their own businesses.”
Commander Mitchell Ofoyeju, Tincan Island Port Strategic Command, Lagos, praised QNET’s potential: “The product line is amazing, people-centric, and has great potential in Nigeria. It’s impressive, and I recommend it to young Nigerians.”
Ofoyeju emphasized QNET’s capacity-building opportunities: “This can generate wealth, increase productivity, and engage youth meaningfully, keeping them away from crime and illicit activities.”
The expo featured health products, luxury watches, jewelry, and educational materials, demonstrating QNET’s commitment to enhancing lives through innovative products.
As QNET continues to expand its presence in Nigeria, the partnership with Transblue is poised to empower entrepreneurs, promote economic growth, and foster a positive impact on Nigerian youth.
- E-Financial2 days ago
CBN Orders Banks to Load ATMs, Warns Against Cash Disbursement to Naira Hawkers
- News2 days ago
Experts Highlight Blockchain, AI, eCommerce Potentials for Africa @ AfriTECH 4.0
- E-Financial2 days ago
Inuwa Tasked Fintech Stakeholders on Collaboration to Deepen Financial Literacy
- Telecom2 days ago
Karl Toriola Champions MTN’s Digital Transformation @TeXcellence 2024
- E-Financial1 day ago
NGX Proposes Amendment to Trading License Holders Rules
- Telecom2 days ago
EU Hits Meta with $840M Fine for Abusive Facebook Ad Practices
- E-Business2 days ago
Breaking Barriers: QNET’s Product Expo Opens Doors for Nigerian Entrepreneurs
- Telecom2 days ago
TD Africa Launches TecHERdemy to Empower 400 Nigerian Women in Tech