Connect with us

E-Business

32m Attacks Thwarted on World Password Day

Published

on

Kindly share this post

Passwords serve as the foundation of our digital lives, but they also serve as the gateway for cybercriminals to hack into sensitive personal information. Considering their essential function, passwords remain a prime target for increasingly sophisticated cybercriminal attacks.

Therefore, taking proactive measures to safeguard accounts and personal information is imperative.

To mark World Password Day on May 2nd – highlighting the essential role passwords play in protecting our lives online – Kaspersky experts are providing essential tips to enhance password security, ensuring that users data stays out of the hands of attackers.

Weak and simple passwords have always been an attractive target for scammers as cracking them gives criminals access to multiple types of data – personal data, financial information, medical records etc.

Kaspersky telemetry indicates more than 32 million attempts to attack users with password stealers took place in 2023, this followed more than 40 million incursions in 2022.

These alarming statistics highlight the need for users to create strong, unique and varied passwords for different accounts. This way they can mitigate the risks of cyber threats and maintain personal security online.

To enhance password security, Kaspersky experts recommend the following steps and practices:

The ‘association method’ helps create strong and memorable passwords

The association approach involves creating a password from a sequence of words or ideas that have personal significance but are not easily guessable by others. A password can be based on a favourite quote, a memorable song lyric, or a unique combination of objects. This technique generates strong passwords without requiring complex memorisation, helping to maintain security while reducing the risk of forgetting. For example, a phrase “I first visited Paris in 2008” could be transformed into a password “IfvPin2o:o8”.

Are regular passwords too boring? How about emoji?

If using the same password everywhere becomes too much and you lack the imagination to make up something new, emoji-passwords could be a non-standard and safe option. Since they are a part of the Unicode standard, it is potentially possible to use them as passwords.

One of the most significant pros is that scammers cannot brute-force emoji-passwords, since various tools and dictionaries can’t crack combinations like these. More detailed information on how to set up an emoji password and the necessary requirements is available here.

The most obvious option is not the safest one

Using common passwords or default values such as “1234”, “password” or “admin” could make personal data and accounts vulnerable to scammers, since they use automated tools to guess the correct combinations.

It may take several seconds to find the right answer and gain access to personal data. A strong and complicated password includes a mix of letters, numbers, and symbols, while avoiding personal information such as names or birthdays.

Additionally, there are online public free services that allow everyone check how strong their passwords are to mitigate possible risks.

Old, but gold: one account – one password

This practice ensures that if one account is compromised, others remain secure. By creating a unique password for each account, you minimise the damage a hacker can do if they manage to steal one.

This approach isolates security breaches and helps protect sensitive data. According to a global survey, the average user has approximately 8 accounts. Remembering even 2-3 long and complicated passwords (containing up to 15 symbols) could be impossible for the majority of users.

In this case it is both safe and useful to shift the responsibility of remembering all the passwords to a security solution, such as Kaspersky Password Manager.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Firm Spots Rising Scam Activity Around the 2026 World Cup, from Bogus Tickets to $500,000 “grant” Emails

Published

on

Kindly share this post

Millions of football fans around the world are gearing up for the World Cup, and cybercriminals are seizing the moment to exploit the heightened interest.

Experts at Kaspersky have uncovered various types of scams that mimic official tournament resources or leverage the event for unsafe purposes, putting users’ data and finances at significant risk.

On one of the fraudulent websites discovered, users are offered the option to buy tickets for FIFA World Cup matches, with payments accepted in almost any currency.

However, after completing the fake registration and payment steps, users risk not only losing money from their bank cards but also exposing sensitive personal data to attackers.

The site uses the official colour scheme of the 2026 tournament to mislead users. In addition, the scammers offer ways to contact them, either directly on the site or via messaging apps.

Another website offers users the chance to purchase “official merchandise” for the 2026 tournament, featuring images of mascot plush toys and T-shirts, with a wide selection available for “purchase.” To make the offer more enticing, the site highlights steep discounts. Additionally, to appear more credible, the scammers have added a “Trusted store” badge at the bottom of the page, along with a registration form that requests personal and banking details.

Another attack scenario involves fraudulent email campaigns, in which attackers attempt to trick users into sending money or click a phishing link. To increase the chances of engagement, the emails feature compelling subject lines and persuasive messaging.

In one of the examples identified, fans received emails allegedly sent by official representatives of the event regarding a fake decision from a dispute resolution chamber. The link provided in the email leads to a phishing page.

In some cases, users are targeted with scam emails claiming they have “won” a $500,000 grant to cover tickets, flights, and accommodation, followed by instructions to contact the sender to claim the “prize” funds. Kaspersky also reports email spam and unsolicited ads related to the sale of competition-themed merchandise and souvenirs, some of them might turn out to be a scam.

“Unfortunately, major sporting events that attract large audiences are never overlooked by scammers. Seemingly harmless or even appealing emails can often conceal not only dangerous links and malicious attachments.

In some cases, careless interaction with such messages can lead to serious device infections. We recommend that users ignore any suspicious emails and websites to protect their financial assets and keep their devices and personal data secure,” says Anna Lazaricheva, senior spam analyst at Kaspersky.


Kindly share this post
Continue Reading

E-Business

NDPC Warns of Offshore Data Risks as 90 Percent of Country’s Data is Hosted Abroad

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has raised concerns over data sovereignty, national security as well as loss of economic value, as over 90 per cent of Nigeria’s data is hosted abroad.

NDPC Warns of Offshore Data Risks as 90 Percent of Country’s Data is Hosted Abroad

Pic credit…247digitize.com

Vincent Olatunji, national commissioner/CEO, NDPC, stressed the importance of safeguarding Nigeria’s digital economy through strong data protection and privacy frameworks.

He spoke while while delivering a keynote address at the IoT West Africa Conference, where he stated that the trend poses significant risks to Nigeria’s control over its digital assets.

He further described the situation as precarious for the nation’s sovereignty, and called for urgent investment in local data infrastructure.

Olatunji, highlighted data sovereignty, the growing role of data centres, and regulatory expectations under the Nigeria Data Protection Act, 2023, noting both the benefits of compliance and the risks of non-compliance. Olatunji underscored that data centres are now critical infrastructure for Nigeria’s digital transformation.

While decrying that over 90 percent of the Nigeria’s data is hosted abroad which is precarious for the nation’s sovereignty he encouraged for more investment in the sector as it is projected to reach $1.9 billion by 2031.

Also speaking, Kashifu Inuwa, the director-general of the National Information Technology Development Agency (NITDA), said policy is emerging as the key driver of Nigeria’s digital transformation, particularly in shaping the development of the Lagos-Abuja digital corridor.

“While infrastructure responds to demand, policy creates the enabling environment for sustainable growth,”

Inuwa who was represented by Aristotle Onumo, director, stakeholders management and partnership at the IoT West Africa Conference in Lagos, on the theme “The Lagos-Abuja Digital Corridor: Building Africa’s Next Data Centre and Cloud Hub.”

Inuwa emphasised that while infrastructure responds to demand, policy remains the critical driver that creates an enabling environment for sustainable digital growth.

He explained that Nigeria’s broadband policy, which stipulates minimum speeds of 10 Mbps for rural areas and 25 Mbps for urban centres, provides a strategic framework for prioritising infrastructure deployment along the Lagos-Abuja digital corridor.

He cautioned, however, that without deliberate collaboration and partnership between government, the private sector, and civil society, widespread infrastructure rollout would remain challenging. “Collaboration is the pathway that massifies impact, while partnership harnesses collective intelligence. No one can achieve this in isolation,” he said.

Inuwa also spoke on the Nigerian Sovereign Cloud Project; a flagship initiative aimed at strengthening indigenous cloud service providers and preventing the dominance of Nigeria’s digital infrastructure by foreign hyperscale operators.

By scaling local infrastructure to meet global standards, the project seeks to domesticate data hosting, reduce operational costs, and improve access to cloud services across the country.


Kindly share this post
Continue Reading

E-Business

Opay Plans IPO in US, Targets $4Bn in Valuation

Published

on

Kindly share this post

Opay, a financial technology (fintech) firm, is working with Citigroup Inc., Deutsche Bank AG, and JPMorgan Chase & Co. for an initial public offering (IPO).

Opay Plans IPO in US, Targets $4Bn in Valuation

According to a report by Bloomberg on Friday,  sources said the platform, backed by SoftBank Group Corp., is considering a listing in the United States and is targeting a valuation of about $4 billion.

They added that the company could proceed with the share sale later this year, although the timing and size of the offering are yet to be finalised.

Opay is one of Africa’s fastest-growing fintech firms, offering mobile payments, transfers, and other financial services across Nigeria.

Advertisement

The fintech company, Citi, Deutsche Bank, and JPMorgan have not publicly commented on the IPO plans.

Like Opay, Flutterwave, a major fintech company in Africa is planning an IPO.

 


Kindly share this post
Continue Reading

Trending