E-Business
Microsoft Dominates as the Most Impersonated Brand for Phishing Scams in Q2 2023
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies and a leading provider of cyber security solutions globally, has published its Brand Phishing Report for Q2 2023.
The report highlights the brands that were most frequently imitated by cybercriminals in their attempts to steal individuals personal information or payment credentials during April, May and June 2023.
Last quarter global technology company Microsoft climbed up the rankings, moving from third place in Q1 2023 to top spot in Q2. The tech giant accounted for 29% of all brand phishing attempts.
This may be partially explained by a phishing campaign that saw hackers targeting account holders with fraudulent messaging regarding unusual activity on their account.
The report ranked Google in second place, accounting for 19% of all attempts and Apple in third, featuring in 5% of all phishing events during the last quarter. In terms of industry, the technology sector was the most impersonated, followed by banking and social media networks.
At the beginning of this year, CPR warned of an upward trend that saw phishing campaigns leveraging the finance industry, and this has continued over the last three months. For example, American banking organization Wells Fargo took fourth place this quarter due to a series of malicious emails requesting account information.
Similar tactics were noted in other scams that imitated brands such as Walmart and LinkedIn, which also featured in this report’s top ten list taking sixth and eighth place.
“While the most impersonated brands move around quarter to quarter, the tactics that cybercriminals use scarcely do. This is because the method of flooding our inboxes and luring us into a false sense of security by using reputable logos has proven successful time and time again,” said Omer Dembinsky, Data Group Manager at Check Point Software.
This is why we all must commit to stop and review, taking a moment before clicking on any link we don’t recognize. Does something feel off? Is there bad grammar or any language that is prompting an instant response? If so, this may be an indicator of a phishing email.
For organizations worried about their own data and reputation, it is key that they take advantage of the right technologies that can effectively block these emails before they have chance to dupe a victim.
In its latest Titan release R81.20, Check Point has also announced an inline security technology called Zero Phishing was enhanced now with a new engine called Brand Spoofing Prevention, designed to stop brand impersonation and scaled to detect and block also local brands that are used as lures, in any language, any country, and it’s also prevents pre-emptively as the engine recognized the fake domains on registration stage and blocks access to them.
The solution uses an innovative AI-Powered engine, advanced Natural Language Processes and improved URL scanning capabilities to auto-inspect possible malicious attempts and block access to impersonated local and global brands across multiple languages and countries, resulting in a 40% higher catch rate than traditional technologies.
In a brand phishing attack, criminals try to imitate the official website of a well-known brand by using a similar domain name or URL and a web-page design that resembles the genuine site.
The link to the fake website can be sent to targeted individuals by email or text message, a user can be redirected during web browsing, or it may be triggered from a fraudulent mobile application. The fake website often contains a form intended to steal users credentials, payment details or other personal information.
Top phishing brands in Q2 2023
Below are the top brands ranked by their overall appearance in brand phishing attempts:
- Microsoft (29%)
- Google (19.5%)
- Apple (5.2%)
- Wells Fargo (4.2%)
- Amazon (4%)
- Walmart (3.9%)
- Roblox (3.8%)
- LinkedIn (3%)
- Home Depot (2.5%)
- Facebook (2.1%)
Microsoft Phishing Email Unusual Activity Example
In the second quarter of 2023, a phishing campaign targeted Microsoft account holders by sending fraudulent messages regarding unusual sign-in activity.
The campaign involved deceptive emails which were sent allegedly from inside the company with sender names such as Microsoft on <company domain>. The subject line of these phishing emails was “RE: Microsoft account unusual sign-in activity” and they claimed to have detected unusual sign-in activity on the recipient’s Microsoft account. The emails provided details of the alleged sign-in, such as the country/region, IP address, date, platform and browser.
To address this supposed security concern, the phishing emails urged recipients to review their recent activity by clicking on a provided link which leads to malicious websites unrelated to Microsoft. The URLs used in the campaign, such as hxxps://online.canpiagn[.]best/configurators.html and hxxps://bafybeigbh2hhq6giieo6pnozs6oi3n7x57wn5arfvgtl2hf2zuf65y6z7y[.]ipfs[.]dweb[.] The link is currently inaccessible, but the assumption is that they were designed to steal user credentials or personal information, or to download malicious content onto the users device.
At the close of 2025, Temidayo Ojo, the CEO of Jumia Nigeria, reflected on a year-end shopping season that points to the growing maturity of the country’s e-commerce market. “Black Friday is no longer a single, short-lived spike in activity,” he said.
“It has become a familiar, anticipated moment in the retail calendar, where consumers shop deliberately and with confidence.”
Preliminary KPIs for the two months ended November 30, 2025, show strong year-on-year growth in both orders and Gross Merchandise Value (GMV), with GMV growth outpacing order growth. This indicates that customers are placing fuller, more considered baskets rather than shopping in fragmented transactions. Nigeria ranked among Jumia Group’s better-performing markets, with engagement remaining steady throughout the Black Friday period rather than spiking briefly and tapering off.
A key factor behind this performance is the growing familiarity of consumers with online shopping. Customers are increasingly leveraging platform features such as saved carts, brand stores, and price comparison tools to plan purchases in advance. This trend suggests that digital commerce is becoming embedded in everyday habits rather than being viewed as a one-off event.
Ojo also highlighted the role of Jumia’s JForce network in connecting digital commerce to local communities. “Our agents are critical to ensuring that customers across Nigeria, including secondary cities and smaller communities, have access to variety, consistent pricing, and reliable delivery,” he said. “During peak periods like Black Friday, JForce agents can respond faster, serve more customers efficiently, and build stronger local relationships. This isn’t just a distribution channel—it’s a pathway to sustainable income and inclusion.”
Reflecting on the overall performance, the CEO concluded: “What we’re seeing this year-end is steady engagement across categories, stronger consumer confidence, and partners like our JForce agents benefiting from increased activity.
“It confirms that Nigeria’s e-commerce ecosystem is maturing, growing in a more structured and resilient way. As the December Holiday Sale continues, we expect these patterns of familiarity, trust, and participation to sustain momentum and drive both commerce and community impact across the country.”
Galaxy Backbone Limited (GBB) has been ranked first overall in the 2025 Federal Government Website Performance Scorecard.
This is a landmark achievement for Nigeria’s digital economy.
The ranking, conducted by the Bureau of Public Service Reforms (BPSR), is the definitive benchmark for digital excellence and transparency across all Ministries, Departments, and Agencies (MDAs).
Professor Ibrahim Adepoju Adeyanju, managing director and CEO of Galaxy Backbone, received the award during a ceremony in Abuja.
He described the feat as a validation of the agency’s“Nigeria First”data sovereignty strategy and its relentless pursuit of service excellence.
This recognition comes as the Federal Government intensifies its push to achieve a fully paperless civil service by December 31, 2025.
GBB has been the primary architect of this transition through its 1Gov Enterprise Content Management (ECM) platform, which now hosts the operations of almost all federal MDAs.
The award adds to a growing list of accolades for Galaxy Backbone in 2025, following its recent win of the “International Standard Excellence Award for Best IT Service Provider.”
As the central hub for government shared services, GBB’s performance serves as a blueprint for other agencies currently undergoing digital transformation.
With its expanded fiber-optic backbone now covering over 13 states and its secure cloud solutions, Galaxy Backbone remains the cornerstone of Nigeria’s vision to become a leading digital nation by the end of the decade.
Okitipi Samuel, a Nigerian man, has been taken into custody by the Nigeria Police Force for his alleged role in a global cyberattack on Microsoft 365 users.
Benjamin Hundeyin, Force public relations officer, disclosed this on Thursday in Abuja while briefing journalists on the outcome of investigations carried out by the National Cybercrime Centre of the Nigeria Police Force.
Hundeyin said the centre, under the leadership of Ifeanyi Uche, its director and Commissioner of Police, commenced investigations in collaboration with Microsoft, the Federal Bureau of Investigation, the United States Secret Service, and the United Kingdom’s National Crime Agency.
According to him, investigations revealed that a phishing toolkit known as “Raccoon 0365” was used to create fake Microsoft login portals to harvest user credentials and unlawfully access email accounts belonging to corporate organisations, financial institutions, and educational institutions in several countries.
“This investigation commenced following credible intelligence received from Microsoft USA through the FBI, indicating that a malicious phishing toolkit known as Raccoon0365 was being used to create fake Microsoft login portals, harvest user credentials, and unlawfully access the email accounts of corporate organisations, financial institutions, and educational establishments,” Hundeyin said.
He added that between January and September 2025, several reports of unauthorised access to Microsoft 365 accounts were traced to phishing emails designed to mimic legitimate Microsoft login pages, enabling business email compromise, internal phishing, data breaches, and other cyber-enabled fraud.
Hundeyin said digital forensic analysis and cryptocurrency tracing identified wallets connected to the illegal operation.
He noted that operatives were deployed to Lagos and Edo states, leading to the arrest of three suspects identified as Joshua, James, and Okitipi Samuel between September 20 and October 4, 2025.
“Following extensive digital forensic and technical intelligence analysis, the centre conducted cryptocurrency tracing that identified suspicious wallets connected to cash-out schemes.
“Acting on actionable intelligence, operational teams were deployed to Lagos and Edo states, resulting in the arrest of Joshua, James, and Okitipi Samuel. Searches at their residences led to the recovery of mobile devices, laptops, and other digital exhibits linked to the fraudulent scheme,” he said.
Hundeyin identified Okitipi Samuel, also known as “0365” and Moses Felix as the principal suspect and developer of the phishing infrastructure.
He added that investigations confirmed Samuel unlawfully used the email details of one of the arrested individuals without consent to register some of the accounts used in the operation.
The police spokesperson said further investigations revealed that the identities of Joshua and James were used without their consent.
“There was no evidence linking them to the creation or operation of the phishing scheme. They were victims of identity theft,” Hundeyin said.
He said a prima facie case had been established against Samuel for identity theft, unlawful access to computer systems, creation and distribution of malicious software, unauthorised interference with network data, and aiding and abetting fraud.
Hundeyin added that the suspect would be charged under relevant provisions of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2024.
He said the suspect would be prosecuted in Nigeria, noting that the country has the capacity to enforce its cybercrime laws, although extradition could be considered if formally requested through due process.
Hundeyin assured Nigerians that the police, under the leadership of Kayode Egbetokun, inspector-general of Police, would continue to protect the country’s digital ecosystem and urged citizens to practise good cyber hygiene by being cautious when clicking links and sharing personal information online.
Speaking separately, Ifeanyi Uche, director of the National Cybercrime Centre, urged Nigerians to exercise caution online.
Uche advised members of the public to avoid clicking on links from unknown or unexpected sources, noting that such links often contain malware or phishing tools designed to compromise devices and personal data.
He warned that indiscriminate clicking of links or responding to unsolicited emails could lead to unauthorised access to personal and corporate accounts, urging citizens to “wash their cyber hands” by verifying sources before taking action online.
NDIC Reinforces Full Oversight Compliance to Safeguard Depositors
GTCO Secures Regulatory Approvals to Raise N10bn in Private Placement
Jumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity
MTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star
T2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs
Nigeria Records Highest Weekly Cyberattacks in Africa — Report
Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
Cyber Tsunami Hits Nigeria as Breaches Surge 1,047%, esentry Q3 Report Reveals
Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers
Report Reveals Half of 2025’s Compromised Passwords were Already Leaked
Telecom3 days agoGoogle Finally Allows Users to Change Gmail Address, Keeps Data and Services Intact
News3 days agoInsomniaQ Spotlights African Creativity in Lagos
General News3 days agoT2 Backs Youth Excellence as NCBC Wins Bosun Tijani Foundation Basketball Tournament
E-Financial2 days agoNigeria’s N58.18trn Budget and Rising Cost of Deficit Governance
Telecom2 days agoNnaemeka Ani – The Architect of ‘Code and Courage’
Telecom2 days agoMTN Nigeria Appreciates Partners, Customers at Lagos Prestige Experience
Telecom17 hours agoNCC Grants 45 Days for Telecoms Firms to Fix Unapproved Shareholding Changes
Telecom17 hours agoT2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs