Connect with us

E-Business

Firm Highlights Biometric, Signature Risks as Phishing Evolves with AI and Stealth

Published

on

Kindly share this post

Kaspersky detected and blocked over 142 million phishing link clicks in Q2 2025, a 3.3% increase globally and a 25.7% increase in Africa from Q1. Currently, phishing is going through a shift driven by sophisticated AI-powered deception techniques and innovative evasion methods.

Cybercriminals are exploiting deepfakes, voice cloning and trusted platforms like Telegram and Google Translate to steal sensitive data, including biometrics, electronic signatures and handwritten signatures, posing unprecedented risks to individuals and businesses.

AI-powered tactics transforming phishing attacks

AI has elevated phishing into a highly personalised threat. Large language models enable attackers to craft convincing emails, messages and websites that mimic legitimate sources, eliminating grammatical errors that once exposed scams.

AI-driven bots on social media and messaging apps impersonate real users, engaging victims in prolonged conversations to build trust. These bots often fuel romantic or investment scams, luring victims into fake opportunities with AI-generated audio messages or deepfake videos.

Attackers also create realistic audio and video deepfake impersonations of trusted figures — colleagues, celebrities or even bank officials — to promote fake giveaways or extract sensitive information. For instance, automated calls mimicking bank security teams use AI-generated voices to trick users into sharing two-factor authentication (2FA) codes, enabling account access or fraudulent transactions.

Additionally, AI-powered tools analyse public data from social media or corporate websites to launch targeted attacks, such as HR-themed emails or fake calls referencing personal details.

Employing new tactics to bypass detection

Phishers are deploying sophisticated methods to gain trust, exploiting legitimate services to prolong their campaigns. For instance, Telegram’s Telegraph platform, a tool to publish long texts, is used to host phishing content.

Google Translate’s page translation feature generates links that look like https://site-to-translate-com.translate.goog/… and are used by attackers to bypass security solutions’ filters.

Attackers now also integrate CAPTCHA, a common anti-bot mechanism, into phishing sites before directing users to the malicious page itself. By using CAPTCHA, these fraudulent pages deflect anti-phishing algorithms, as the presence of CAPTCHA is often associated with trusted platforms, lowering the likelihood of detection.

A switch in hunting: From logins and passwords to biometrics and signatures

The focus has shifted from passwords to immutable data. Attackers target biometric data through fraudulent sites that request smartphone camera access under pretexts like account verification, capturing facial or other biometric identifiers that cannot be changed.

These are used for unauthorised access to sensitive accounts or sold on the dark web. Similarly, electronic and handwritten signatures, critical for legal and financial transactions, are stolen via phishing campaigns impersonating platforms like DocuSign or prompting users to upload signatures to fraudulent sites, posing significant reputational and financial risks to businesses.

“The convergence of AI and evasive tactics has turned phishing into a near-native mimic of legitimate communication, challenging even the most vigilant users. Attackers are no longer satisfied with stealing passwords — they’re targeting biometric data, electronic and handwritten signatures, potentially creating devastating, long-term consequences.

“By exploiting trusted platforms like Telegram and Google Translate, and co-opting tools like CAPTCHA, attackers are outpacing traditional defenses. Users must stay increasingly skeptical and proactive to avoid falling victim,” said Olga Altukhova, security expert at Kaspersky.

Earlier in 2025 Kaspersky detected a sophisticated targeted phishing campaign which was dubbed Operation ForumTroll, as attackers sent personalised phishing emails inviting recipients to the “Primakov Readings” forum.

These lures targeted media outlets, educational institutions and government organisations in Russia. After clicking on the link in the email, no additional action was needed to compromise their systems: the exploit leveraged a previously unknown vulnerability in the latest version of Google Chrome.

The malicious links were extremely short-lived to evade detection and, in most cases ultimately redirected to the legitimate website for “Primakov Readings” once the exploit was taken down.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

NITDA Takes Over National Digital Architecture System

Published

on

Kindly share this post

Nigeria has taken a major step toward strengthening its digital governance framework as the National Information Technology Development Agency (NITDA) officially assumes control of the Nigeria Government Enterprise Architecture (NGEA) infrastructure.

NITDA Takes Over National Digital Architecture System

The handover ceremony held in Abuja, marks the culmination of a high-level partnership with the Korea International Cooperation Agency (KOICA).

This transition signals a shift from fragmented IT projects to a unified, disciplined approach to national digital investment.

The NGEA initiative forms a core part of the e-Government Masterplan 2.0 (Ne-GMP 2.0), aimed at establishing a unified and structured approach to managing government IT investments and digital resources.

The framework is designed to ensure that technology deployment across public institutions aligns with national priorities while improving efficiency and accountability.

With the system now operational, government agencies are expected to adopt more integrated digital processes, allowing seamless data sharing and interoperability.

This is anticipated to reduce duplication, strengthen risk management, and translate policy objectives into measurable digital outcomes.

Over the past two and a half years, Nigerian technical experts worked closely with their Korean counterparts to develop the architecture framework, create reference models, and execute pilot programmes in key institutions.

These include the National Identity Management Commission, Nigeria Customs Service, Nigeria Immigration Service, and NITDA.

Officials say the NGEA represents a shift from fragmented digital efforts to a more coordinated, citizen-focused system.

The infrastructure is hosted by Galaxy Backbone Limited, providing a secure and reliable platform for nationwide deployment.

Looking ahead, NITDA is expected to work with government stakeholders to expand and sustain the system, while the Federal Ministry of Communications, Innovation and Digital Economy will provide policy guidance to ensure its adoption across the country.

 

 


Kindly share this post
Continue Reading

E-Business

FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion  – Minister

Published

on

Kindly share this post

Bosun Tijani, minister of Communications, Innovation and Digital Economy, has said the government is shifting focus from expanding access to ensuring “meaningful connectivity” that drives economic growth and inclusion.

FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion  - Minister

Bosun Tijani, minister of Communications, Innovation and Digital Economy

The minister made the statement on Friday while addressing stakeholders at the inauguration of board members of the Universal Service Provision Fund (USPF) in Abuja.

He said that although Nigeria had made significant progress since the introduction of GSM services, millions of people, particularly in rural and underserved communities, remain either unconnected or unable to fully benefit from digital services.

Dr Tijani highlighted ongoing investments in digital infrastructure, including plans to deploy 90,000 kilometres of fibre optic network and nearly 4,000 telecom towers nationwide.

He said initiatives under the USPF had improved access through projects such as rural connectivity and digital facilities in schools but stressed that the next phase must prioritise effective usage.

“It is not enough to connect a community. We must ensure that schools can teach with digital tools and that small businesses can access market opportunities,” he said, citing a pilot project in the Kura community where connectivity has enhanced access to communication, education and healthcare.

Aminu Maida, executive vice chairman, Nigerian Communications Commission (NCC) also called for a shift towards meaningful connectivity, noting that while data usage had grown significantly, it remained concentrated in urban areas.

According to him, recent data shows that telecom usage has increased by about 160% over the past two years, largely driven by urban demand.

“When we drill down, we see that a lot of that growth is actually in urban centres. So, the gap between those who are not connected or not meaningfully connected is growing,” he said.

Dr Maida added that the trend underscored the need for the USPF board to intensify efforts to bridge both access and usage gaps across the country.

Both officials emphasised the importance of collaboration, sustainable investment models and improved digital literacy to ensure that connectivity translates into real economic benefits for Nigerians.

 

 


Kindly share this post
Continue Reading

E-Business

Jury Finds Meta, Google Liable for Woman’s Social Media Addiction

Published

on

Kindly share this post

A jury in Los Angeles has found technology companies, Meta and Google liable for contributing to a young woman’s social media addiction, in a case being described as a landmark ruling.

Jury Finds Meta, Google Liable for Woman’s Social Media Addiction

The 20-year-old woman, identified only as Kaley, argued that she became addicted to Google’s YouTube and Meta’s Instagram from an early age due to their attention-driven design features.

According to her testimony, she began using YouTube at the age of six after downloading the app on her iPod Touch to watch videos about lip gloss and online games.

Kaley told the court that she joined Instagram at nine, bypassing parental restrictions put in place by her mother, and spent extended periods on social media.

The trial, which lasted about a month, with arguments and evidence from both sides.

Jurors also heard testimony from Mark Zuckerberg, chief executive, Meta and Adam Mosseri, Instagram head.

However, Neal Mohan, YouTube chief executive, did not testify.

The jury found that the companies were negligent in the design of their platforms and failed to adequately warn users about potential harms. Meta and Google were ordered to pay the woman $3 million in damages.

Jurors also recommended additional punitive damages, including $900,000 against YouTube and $2.1 million against Meta, according to company spokespersons.

The jury apportioned 70 per cent of the responsibility to Meta and 30 per cent to YouTube.

Kaley was present in the courtroom when the verdict was delivered, alongside parents of other teenagers who say they were harmed by social media use. Both companies said they plan to appeal the decision.

“We respectfully disagree with the verdict and will appeal. Teen mental health is profoundly complex and cannot be linked to a single app. We will continue to defend ourselves vigorously as every case is different, and we remain confident in our record of protecting teens online”, a Meta spokesperson said.

José Castañeda, Google spokesperson, said the case misunderstands YouTube, which is a responsibly built streaming platform, not a social media site.


Kindly share this post
Continue Reading

Trending