E-Business
Sophos Schools Google, Users After ‘Docs’ Users’ Phishing Scam
Following the disclosure by Google saying it has stopped a phishing email that reached about a million of its users, security firm Sophos has identified a number of factors Google should consider, going forward, on how best to manage cases like this.
Recall, the scam claimed to come from Google Docs – a service that allows people to share and edit documents online.
Users who clicked a link and followed instructions, risked giving the hackers access to their email accounts.
Google said it had stopped the attack “within approximately one hour”, including through “removing fake pages and applications”.
“While contact information was accessed and used by the campaign, our investigations show that no other data was exposed,” Google said in an updated statement.
“There’s no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup.”
In an email to Nigeria CommunicationsWeek Chester Wisniewski, principal research scientist, Sophos, observed, “First and foremost, this is an abuse of Google’s APIs. While at first glance it appears to be a phishing attack, the emails come from Google and you are logging into the real Google”.
Wisniewski said that attacks on systems that are open for anyone to sign up as a developer using OAuth have been vulnerable to this type of attack for a long time, and the onus is on Google to do a better job vetting application developers.
“This is no different than the abuse of the Google Play store by malware authors. There is very little individuals can do other than be forever suspicious about legitimate requests from services provided by Google, Twitter, Facebook and other online services that use OAuth with an un-vetted application developer program. Twitter’s users were attacked using these techniques a few years back. Unfortunately, Google has also fallen victim to a similar attack vector. When users see official emails from Google and official login pages used in scams, this leads the goodwill Google has garnered from its users to be potentially damaged. All providers of OAuth have a responsibility to police the use of their platforms to stop users from being tricked through official requests from services like Google, Twitter and Facebook.
“We do suggest that users keep an eye on social media. As the Google Doc “phishing” attempt demonstrates, Twitter is a great early-warning system. There’s little doubt that the tweeted warnings saved people from being victimized.
“As a reminder, users should check the apps they have approved to access their accounts and remove anything that may be suspicious on all OAuth-based platforms. For Google it is under your Google account -> Sign-in & Security -> Connected apps & sites. On Twitter and Facebook it is Settings & Privacy -> Apps.
Sophos also went ahead to demonstrate how this type of attacks worked:
You get a real email from Google saying someone wants to share a file with you.
You get sent to a real Google login page and sign in.
You get a prompt that an “add on” wants access to your mail and contacts. The developer name is listed as “Google Docs,” but it could say anything (this is where Google could do more to prevent this).
The only way to attempt to check if it is real is to click on “Google Docs” and see the actual account creating the request, but it could say many believable things and there is no specific thing to watch for.
“The only reliable way to not fall victim is to never accept apps connecting to your account and requesting access to read/write your mail and contacts, or just about any other thing they might request access to unless you are specifically trying to hook into some new service, which you still may not be able to trust”.
Wisniewski also warned that when attacks like this happen, “it’s a good reminder to go back to your social media accounts and review what applications you’ve given permission to access your information and revoke permission if you no longer trust or use that particular app.”
Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.
The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.
In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.
Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.
Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”
Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.
To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).
The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”
The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.
Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.
This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.
The Federal Government, has warned Nigerians against the growing threat of cyber slavery within the West African sub-region.
The Ministry of Foreign Affairs, in a statement issued in Abuja by Kimiebi Imomotimi Ebienfa, acting spokesperson, noted with grave concern the alarming rise of cyber slavery across parts of West Africa, targeting Nigerian citizens, particularly vulnerable youths.
The government said many young Nigerians, including underage teenagers, were lured out of the country under the false promise of lucrative employment opportunities abroad, particularly in crypto-related operations.
According to the government, “In reality, these individuals are trafficked into sophisticated scam operations and enslaved to work in criminal “call centres” — often referred to as “419 cyber-scam factories.” There, they are forced under coercive and inhumane conditions to send thousands of fraudulent emails, text messages, and calls aimed at defrauding victims worldwide.”
The government also noted with dismay, a recent incident where the Economic and Organised Crimes Office (EOCO) in Accra, Ghana, rescued and detained a group of Nigerians forced to engage in cybercrime activities under inhumane conditions.
“This incident highlights the severe exploitation and abuse associated with cybercrime operations. It also underscores the need for enhanced efforts to combat such multibillion-dollar criminal networks and mitigate the susceptibility of victims.
“The Ministry strongly warns all Nigerians, especially the youths and parents, to exercise the utmost caution when presented with job offers, particularly those promising easy money, overseas travel, or remote work involving cryptocurrencies.
“Nigerians are therefore advised to verify all employment offers through official channels and report suspicious cases to relevant authorities for necessary investigation and action to curtail the activities of the perpetrators.
“The Ministry wishes to assure the general public that, as a precautionary measure to address this unfortunate situation, the Federal Government is working closely with regional partners, law enforcement agencies, and international organizations to tackle this heinous crime, rescue victims, and bring perpetrators to justice.
“The Ministry remains committed to protecting Nigerian citizens at home and abroad and will continue to raise awareness about emerging threats to the welfare and dignity of our people,” the statement read.
E-Business
ALX Nigeria Launches 2025 Ventures Incubator, Premieres Pan-African “Do Hard Things” Finale
ALX Nigeria is once again proving that when African talent meets the right opportunity, magic happens. In a celebration of innovation, grit, and ambition, ALX officially launched its 2025 Ventures Incubator Cohort, an elite group of startup founders handpicked from across the country, while simultaneously premiering the grand finale of the pan-African “Do Hard Things Challenge” at its Lagos hub.
From tech founders solving community challenges to creatives turning ideas into global solutions, ALX is backing the bold and building the infrastructure to help them scale. The ALX Ventures Incubator is the next big leap for graduates of the Founder Academy, providing them with hands-on mentorship, investor access, and the resources to grow sustainable businesses that shape the future of the continent.
“The launch of the ALX Ventures Incubator is proof of our unwavering commitment to building the infrastructure for African innovation to thrive,” said Ruby Igwe, Country General Manager at ALX Nigeria. “We witnessed incredible potential at our Founder Academy, and this next step ensures that these promising startups receive the support they need to grow into high-impact ventures. It’s about translating potential into lasting impact.”
These new ventures are powered by the same spirit that drove the Do Hard Things Challenge—a bold initiative that saw ALX travel to eight African cities in search of the continent’s most inspiring entrepreneurs. The final stop? Mauritius, where top finalists pitched in a high-stakes finale, now screened live for the Lagos tech and media community.
The challenge took ALX across Lagos, Nairobi, Johannesburg, Kigali, Accra, Cairo, Casablanca, and Addis Ababa, shining a spotlight on resilience, creativity, and unstoppable drive.
“The ‘Do Hard Things Challenge’ embodies the spirit we cultivate at ALX: resilience, ambition, and the courage to tackle complex problems,” said Joshua Ebinabo, ALX Ventures Country Entrepreneurship Development Manager.
“Showcasing the finale from Mauritius here in Lagos connects our local innovators to the broader African story. It inspires our learners, reassures parents about the future of tech, and shows business leaders the investment-ready talent right here in our ecosystem.”
The event brought together founders, business leaders, creators, and media influencers—all gathered to witness what happens when African talent is seen, celebrated, and supported. The energy was electric, the vision was bold, and the mission was clear: empower Africa’s brightest minds to build global solutions from right here on the continent.
Whether you’re a startup founder looking to scale or a dreamer looking for your big break, ALX continues to be the launchpad for Africa’s digital and entrepreneurial revolution.
Learn more about ALX’s tech and business programmes at alxafrica.ng, and follow the movement on YouTube, TikTok, LinkedIn, and Instagram via @alxnigeria.
AFC Appoints Ireti Samuel-Ogbu as Chair of Board of Directors
FG to Sanction Airports Without Permits from January 2026
CBN Urges Banks to Source FX for PAPSS Settlement Through NFEM
FIRS Orders Banks to Close Unauthorised Tax Collection Accounts
NBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
Telecom24 hours agoMTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars
Telecom2 days agoMeta Challenges Nigerian Tribunal’s $220M Fine over Data Breaches
Broadcasting2 days agoAI and Cybersecurity: Balancing Innovation with Caution
News24 hours agoNBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
E-Financial2 days agoSupreme Court Sets Aside N22 Trillion Judgement against Union Bank
E-Business2 days agoFG Warns Nigerians Against Growing Threat of Cyber Slavery in West Africa
News2 days agoEFCC Bans Cash above $10,000 from Leaving Nigeria without Declaration
E-Financial24 hours agoCBN Urges Banks to Source FX for PAPSS Settlement Through NFEM