E-Business
Fake or Cloned Websites are Tricking Shoppers into Making Expensive Mistakes

By Georgina Crouth
If you’re shopping online, best you have your wits about you because distractions or multitasking could be your undoing.

Research into online scams in Africa has blamed a lack of vigilance as the most common factor contributing to people falling victim.
And fraudsters, ahead of the curve, are capitalising on that inattention by cloning retail websites, using similar branding and URLs, to trick shoppers of legitimate outlets.
Daily deals website, One Day Only, and Cape Union Mart have both warned that their sites have previously been cloned, advising shoppers to be extra vigilant.
Website cloning has a damaging effect on consumer trust in e-commerce, which is why retailers are educating customers and working with social media platforms and Google to remove cloned accounts.
One Day Only brand and campaign manager Jonathan Spencer says the problem has become out of hand, exacerbated in recent months by the ease of creating clones using AI, which enables anyone to create a new website within minutes.
“It’s quite worrying that it’s so easily done.
“Anyone can put prompts into an AI generator to clone a website, including the artwork. Within minutes, it just pops up.”
While branding and logos are mirrored, the URL is often the dead giveaway: in the case of One Day Only, which ends with .co.za, the URL would end with a .cn, .org or similar.
One Day Only has been targeted on several occasions.
To the unknowing — distracted people or the elderly — the site looks the same, which is why so many are falling victim to it.
Spencer says across the retail landscape, online fraud and phishing attacks have become rife.
“Many other retailers have had a problem with it before, which is why they warn customers to be on the lookout.”
Social media is a cesspit for scams: on Facebook, some clothing “retailers”, often with “Cape Town”, “Jozi” or “South Africa” suffixed to their name for SEO purposes, are catching unobservant shoppers — and racking up thousands of complaints.
There must be more to blockchains than just Bitcoin.
There is. And it’s coming to a future near you soon.
It’s Mine is an entertaining and accessible look at how Bitcoin made its mark, how it all works and how it challenges our long-held beliefs, from renowned expert and frequent Daily Maverick contributor Steven Boykey Sidley.
The sites advertise gorgeous products (using stolen images) at reasonable prices, with “free shipping” within SA.
They may, or may not, be run by local online dropshipping stores but they take no responsibility for inferior quality or wrong orders.
Those sites may have .co.za in the URL but usually are linked to scammers operating from China.
Many customers are reporting that they received items that were vastly different from the photos, were poor quality, or had incorrect sizing. Refunds are refused and customers are required to return items, at their own expense, to China.
Instagram is another challenge: One Day Only has been forced to report numerous Instagram accounts cloning their website.
The Cape Union Mart Group says it has recently become the target of an international scam. Group spokesperson Patuvuyo Mtiya said both Cape Union Mart and Poetry stores’ digital platforms were targeted by fraudsters who used fabricated social media adverts to direct traffic to fake websites, tricking customers into purchasing items from the bogus sites.
“These fraudulent digital platforms are offering products at discounted prices, significantly lower than our standard rates. Despite our best efforts to combat this activity, these scams continue to pose a threat to our valued customers and the integrity of our proudly South African brands.”
Mtiya says while they were not the only company experiencing the fraud, they believe it is crucial to alert the public and take steps to protect consumers from falling victim to these scams.
“We encourage all consumers to exercise caution and take necessary precautions when shopping online,” Mtiya said.
“The Cape Union Mart Group is committed to maintaining the highest standards of security and trust for our customers and will continue to work diligently to combat these fraudulent activities.”
Spencer adds that consumers can protect themselves from spoofing (fake websites), and angler phishing (impersonating trusted sources on social media), by using free online tools like WHOIS to check a website’s age, and Google’s safe browsing function to determine its trustworthiness.
Do your homework before buying online: Reverse search images, read Hello Peter and Google reviews, and click to check on the followers.
The problem of phishing attacks is now so pervasive that in the second quarter of 2024, one in 10 South Africans fell victim to them, according to a recent report by security awareness training platform KnowBe4.
Its survey of 800 people from eight African countries, including South Africa, Nigeria, Kenya, Botswana, Ghana, Egypt, and Mauritius, identified prevalent patterns in online scam susceptibility. The participants, primarily working adults aged 25-44, highlighted external and internal factors that influence their vulnerability to scams.
Nearly 40% of respondents said they had fallen for an online scam in the past year — 43% of victims were distracted and multi-tasking when they fell for the scam. The percentage of distracted or multi-tasking victims was higher in Nigeria and South Africa, at 53% and 46%, respectively.
More than half (53%) of the respondents felt a significant or very significant impact on their lives. Most respondents said it took several months to recover after falling for an online scam.
When asked how much money they had lost in the scam, 40% of the victims said they lost the equivalent of $100 (R1,761), 30% lost between$100 and$1,000, and nearly 9% lost more than $1,000. DM
Credit: www.dailymaverick.co.za
Georgina Crouth
Georgina Crouth is an associate editor for Business Maverick, covering retail, food, alcohol, travel, motoring, education and tech. She has 20 years’ experience, having also worked for eNCA/e.tv, Independent Media and Caxton. A past member of the Western Cape Rental Housing Tribunal, she has also worked as a consumer journalist since 2015.
E-Business
FG Seeks Inclusive, Human-centred Artificial Intelligence Policies

The Federal Government has called for the development of inclusive and human-centred artificial intelligence policies that protect workers’ rights and prevent job losses while harnessing the technology’s potential to drive economic growth and productivity.

The Minister of Labour and Employment, Dr. Muhammad Dingyadi, made the call during the 114th Session of the International Labour Conference in Geneva, Switzerland, while responding to the report of the Chairperson of the Governing Body and the Director-General of the International Labour Organisation, titled “A Moment of Choice: Harnessing Artificial Intelligence for Decent Work,” on Thursday.
Dingyadi said the rapid advancement of AI is transforming labour markets, workplace practices and employment relationships globally, creating both opportunities and challenges for governments, employers and workers.
He noted that while AI can stimulate innovation, improve productivity and expand economic opportunities, it also poses significant risks, including job displacement, widening inequalities and the erosion of the human role in some sectors of the economy.
“The world is moving forward at a rapid pace, underpinned by advances in AI, and we as an organisation must match that pace. While welcoming the positive transformations AI offers, we are also pondering the uncertainties it connotes.
“These shifts, despite their benefits, also cast a dark cloud of uncertainty. Where AI creates new jobs, there may be job losses. Where digital and AI infrastructures are created, there may be a loss of the traditional role and value of the human factor in the work process. We therefore need a balanced approach that ensures that, while harnessing the benefits of AI, the attendant risks do not rob our societies of the gains of decent work,” he said.
The minister commended the ILO leadership for its commitment to advancing the organisation’s mandate despite mounting global economic and social challenges.
Highlighting Nigeria’s efforts to position itself within the rapidly evolving digital economy, Dingyadi said the Federal Government had established the Ministry of Communications, Innovation and Digital Economy to spearhead policies aimed at accelerating technological development and strengthening the country’s competitiveness.
According to him, Nigeria has already begun integrating digital technologies and AI into governance systems through the automation of civil service processes and public service delivery.
“I’m also pleased to inform you that Nigeria is steadily harnessing the gains of this initiative in our Public Service. There is the service-wide automation of civil service processes and communication with AI playing a significant role. Additionally, platform work is gaining ground,” he said.
The minister also welcomed ongoing discussions within the ILO on regulating work in the platform economy, stressing the need for labour standards that protect workers engaged in emerging forms of employment created by digital technologies.
Beyond AI, Dingyadi reiterated Nigeria’s longstanding call for reforms within the ILO, urging member states to accelerate the ratification of the 1986 Amendment to the organisation’s Constitution and review the criteria used to determine countries of Chief Industrial Importance.
He argued that such reforms would promote greater inclusivity, fairness and regional representation within the ILO’s governance structures.
The minister further urged countries to align the ILO Centenary Declaration and the Global Coalition for Social Justice with national development priorities to ensure that technological innovation contributes to social progress and decent work.
Nigeria’s intervention comes amid growing global debate over the impact of artificial intelligence on jobs and the future of work.
According to international labour and development agencies, AI is expected to automate some routine tasks while simultaneously creating new employment opportunities in technology, data science, digital services and other emerging sectors.
However, concerns persist that workers in administrative, clerical and repetitive occupations could face significant disruptions if governments fail to implement policies that support skills development, social protection and workforce transition.
The issue has become a central focus of discussions at the ongoing International Labour Conference, where governments, employers and workers’ representatives are examining how AI can be deployed in ways that promote productivity and economic growth without undermining labour rights, job security and social justice.
For Nigeria, the conversation is particularly significant as the country pursues an ambitious digital transformation agenda aimed at expanding broadband access, growing the digital economy and creating millions of technology-driven jobs for its youthful population.
Experts have repeatedly stressed that achieving these goals will require investments in digital skills, education and worker protections to ensure that the benefits of AI are broadly shared across society.
E-Business
Kaspersky Reveals Credential Abuse Techniques Rank as Attackers’ Most Effective Tactic

According to a recent global report by Kaspersky Security Services, password guessing and valid account misuse rank among the most effective tactics used by cyber criminals in 2025.

This trend reflects a strategic shift, as attackers move away from triggering endpoint protection with noisy malware, in preference of leveraging legitimate access to evade detection.
The ‘Anatomy of a Cyber World’ is an in-depth global report based on data gathered from Kaspersky Managed Detection and Response (MDR), Incident Response (IR), Compromise Assessment and SOC Consulting in 2025. It covers the most common adversary techniques, tools and detection scenarios and highlights the peculiarities of detected incidents.
According to the report, a significant portion of the most frequently monitored attack techniques revolves around credentials and identity management. This analysis, which examines the conversion rates* of various Indicators of Attack (IoA), highlights the following prevalent malicious tactics:
Password guessing – 34.8%. This technique entails attackers systematically trying different passwords until successfully gaining access to an account. It tops the conversion list due to its occurrence in both actual attacks and authorised security assessments, making it a persistent threat in today’s cybersecurity landscape. Organisations who rely on weak or reused passwords continues to enable this age-old strategy.
Local account creation – 34.7%. Once inside a system, attackers frequently create new local accounts to maintain access even if their original foothold is discovered and removed. This technique is frequently observed during security exercises and can be detected — but only with the right telemetry in place, which is often lacking.
Valid account abuse – 34.5%. Instead of deploying malware, attackers log in using stolen or compromised credentials and simply blend in with normal user activity. This makes detection significantly harder, as the access itself appears legitimate. The high conversion rate underscores why compromised credentials remain one of the most dangerous attack vectors.
Account manipulation – 32%. Attackers modify existing accounts to consolidate access such as by activating disabled accounts, altering group memberships, or escalating privileges. This reinforces the broader pattern — rather than introducing new tools, adversaries deepen their control using what is already there.
Network service discovery – 31.2%. Before moving deeper into a network, attackers typically scan for open services and systems they can reach. This reconnaissance step is a strong predictor of what follows: lateral movement and further exploitation. Detecting it early provides security teams a critical window to intervene.
The report ranks attacker techniques by how frequently observed activity ultimately resulted in confirmed malicious incidents. According to Kaspersky experts, while MITRE ATT&CK® catalogs a vast number of adversary techniques, effective detection requires prioritising behaviours with the highest probability of malicious intent while avoiding excessive false positives.
“Threat actors do not always need sophisticated malware to achieve their objectives. In many cases, legitimate administrative tools and compromised accounts remain the fastest and most effective way to move inside an organisation while avoiding detection.
The continued popularity of these techniques shows that organisations need deep visibility into attacker behaviour and the ability to correlate suspicious activity across different stages of an attack.
To address these challenges, companies can enhance their security with our solutions: Kaspersky Managed Detection and Response and Incident Response which cover the entire incident management cycle – from threat detection to continuous protection and remediation,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.
E-Business
INEC Probes Claims of Leaked Voter Data from CVR System

Independent National Electoral Commission (INEC) has started looking into reports of unauthorized access to its Continuous Voter Registration (CVR) database, according to Mohammed Kudu Haruna, national commissioner and chairman of the Information and Voter Education Committee (IVEC),

Haruna, in a statement on Tuesday said that was aware of the allegations spreading on social media and in some news outlets.
“The Independent National Electoral Commission is aware of rumors currently circulating on social media and in certain media about unauthorized access to the Commission’s Continuous Voter Registration (CVR) database.
These claims include the publication of information about a candidate from recent political party primaries in the Federal Capital Territory.
“The Commission takes this allegation very seriously and has quickly begun a thorough investigation to find out what really happened,” the statement noted.
INEC clarified that during the ongoing nationwide CVR process, registered officers were given limited access to specific parts of the registration system.
This access helps them manage voter registrations, transfer requests, and updates to voter records.
The commission stated that access to the information is only allowed for official duties and is taken away once the task ends.
Haruna revealed that initial findings from the commission’s audit trail helped pinpoint the user account used to access the information.
“The audit trail from our early investigation has allowed us to find out which user account was involved. As a result, we’ve questioned relevant staff, and all departments related to this matter are fully cooperating with the investigation,” it mentioned.
The commission also said it is looking into all technical, administrative, and operational details of the situation to figure out who is responsible and whether any internal access-control rules were broken.
However, INEC reported that its early findings indicated there was no outside breach of its systems.
Advertisement
“Our initial findings from the audit trail suggest that there was no external breach of the CVR database, no hacking incident, and no unauthorized outside access to our ICT systems.”
“Instead, the information in question was accessed using valid user credentials assigned to personnel involved in the ongoing CVR exercise but was released without proper authorization,” added the statement.
The commission emphasized that this incident involved retrieving a specific voter record and did not indicate any risk to the overall voter registration system or the personal data of over 90 million registered voters.
“The investigation is focused on the retrieval of a specific voter record and does not suggest any risk to the overall voter registration system or the personal data of over 90 million registered voters, according to the statement.
INEC emphasized that it is dedicated to safeguarding voter information and ensuring the integrity of its electoral systems.
“The Commission clearly states that it takes the security, privacy, and integrity of voter data very seriously. It remains committed to transparency, institutional integrity, and protecting voters’ personal details,” the statement noted.
The commission also announced that the Department of State Services has started its own investigation into this issue.
“Additionally, the Department of State Services has independently begun an investigation. The Commission will fully cooperate with all relevant security agencies and will not hesitate to take legal action against anyone found responsible,” the statement continued.
INEC encouraged the public and media to refrain from making assumptions while investigations are ongoing, promising that it will share its findings and any actions taken in due time.
Telecom2 days agoAba to Host MTN’s “The Gathering” with Pitchathon Offering ₦5 Million Prize Pool for Emerging Startup Founders
General News2 days agoPalmPay Young Star Awardee Hopes to Become a Governor
Telecom2 days agoMeta Unveils AI-Powered Business Agent to Support Customer Engagement
Telecom2 days agoData on Trial: MTN Opens Its Books to Public Scrutiny Over Data Consumption
News2 days agoJapan, UNESCO Boost Digital Learning in 15 CoEs with Donation of ICT Equipment
E-Business2 days agoKaspersky Reveals Credential Abuse Techniques Rank as Attackers’ Most Effective Tactic
Telecom2 days agoNITDA DG Highlights Nigeria’s Digital Infrastructure Strategy at Datacloud Global Congress 2026
Telecom2 days agoDigital Encode Calls for Immediate Action as Cyber Threats Escalate Nationwide













