Connect with us

E-Business

Firm Warns of Phishing Attacks via Compromised Amazon Simple Email Service Accounts

Published

on

Kindly share this post

Kaspersky has detected phishing and business email compromise (BEC) attacks that are leveraging Amazon Simple Email Service (SES) – a cloud-based email service designed for businesses and developers to send and receive high-volume marketing, notification, and transactional emails (for instance, password resets).

Because these emails are sent via a trusted service, they originate from reputable IP addresses, frequently include legitimate “.amazonses.com” identifiers. This makes phishing messages nearly indistinguishable from legitimate correspondence at a technical level. Users should treat unexpected emails with extreme caution.

The attacks are driven by the theft and exposure of credentials from Amazon Web Services (AWS). The attackers are using leaked AWS Identity and Access Management Keys – often found in public repositories, misconfigured cloud storage, and exposed configuration files. With automated tools, threat actors can identify valid keys and abuse them to send large volumes of malicious emails through legitimate infrastructure operated by Amazon.

Attackers disguise malicious links behind trusted domains such as amazonaws.com using redirects and by creating highly convincing HTML email templates. In many cases, phishing pages are hosted on infrastructure that appears legitimate, further increasing the likelihood of credential theft from victims.

One of the campaigns observed by Kaspersky in early 2026 involved emails impersonating document-signing platforms like DocuSign. Victims were prompted to review and sign documents, only to be redirected to fraudulent login pages hosted on an Amazon Web Services page designed to capture credentials.

Researchers also identified business email compromise attacks carried out via Amazon SES in which attackers impersonated employees and fabricated entire email threads with suppliers. These messages, often sent to finance departments, requested urgent payments and included PDF attachments containing only banking details – with no malicious links – making detection challenging.

“We’ve seen attackers abuse trusted platforms before – like in cases with Google Tasks and Google Forms – where scammers rely on built-in notification mechanisms to deliver phishing links from legitimate domains like @google.com, effectively bypassing email filters and exploiting user trust.

“However, the abuse of Amazon SES represents a more advanced stage of this trend: instead of merely leveraging a platform’s notification features, attackers compromise cloud credentials and gain direct control over a trusted email-sending infrastructure. This allows them to scale attacks, fully customise messages, and deliver phishing emails that are hard to distinguish from legitimate business communications,” commented Roman Dedenok, Anti-Spam Expert at Kaspersky.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Identy.io, US Firm Eyes 1Bn Biometric Verification Transactions in Nigeria

Published

on

Kindly share this post

Identy.io, a United States-based cybersecurity and mobile biometric authentication company, has announced plans to process one billion biometric identity verification transactions in Nigeria within the next few years as digital banking adoption continues to expand across the country.

Identy.io, US Firm Eyes 1Bn Biometric Verification Transactions in Nigeria

The company said increasing demand for secure digital identity systems within the banking, telecommunications, and public sectors is creating fresh opportunities for biometric authentication solutions, especially as financial institutions strengthen compliance and anti-fraud measures.

Speaking at an executive roundtable on mobile biometric innovation in Lagos, Jesus Aragon, chief executive officer, Identy.io, said Nigeria’s fast-growing digital financial services sector requires more reliable and scalable identity verification technology to support customer onboarding and transaction security.

He explained that the company’s mobile biometric solution enables users to verify their identities directly from their smartphones without depending on physical scanners, external devices, or centralized processing infrastructure.

The technology supports fingerprint and facial verification while functioning effectively in areas with limited internet connectivity.

According to Aragon, the platform is designed to integrate with Nigeria’s Bank Verification Number (BVN) system and the Nigeria Inter-Bank Settlement System (NIBSS), allowing financial institutions to carry out secure remote identity authentication.

He stated that the company’s technology includes liveness detection and deepfake identification features capable of detecting fake fingerprints, manipulated images, masks, and other fraudulent identity attempts during digital onboarding processes.

The Identy.io boss added that the company’s offline verification capability distinguishes it from several existing solutions in the market, noting that biometric authentication can be completed entirely on users’ mobile devices without constant internet access.

He further disclosed that biometric information captured during authentication remains on the user’s device instead of being transferred to external servers or centralized databases, reducing exposure to data breaches and cyberattacks.

Industry stakeholders at the roundtable also discussed the increasing pressure on Nigerian banks to improve customer verification processes following stricter regulatory directives by the Central Bank of Nigeria on Know Your Customer (KYC) compliance and fraud prevention.

Participants noted that agency banking operations in rural and low-connectivity locations continue to face security and onboarding challenges, creating demand for stronger and more flexible authentication systems.

Aragon maintained that biometric authentication could significantly reduce fraud associated with passwords and one-time passwords (OTPs), stressing that biometrics provide stronger identity assurance for financial transactions.

The company also confirmed that it has expanded its footprint across Africa, Latin America, and the United States, with operational presence already established in Nigeria and Kenya.

Aragon expressed confidence that Nigeria’s banking and telecom industries would generate massive biometric verification volumes in the coming years as financial inclusion and digital payment systems continue to deepen nationwide.


Kindly share this post
Continue Reading

E-Business

TD Africa, HPE Drive Conversations on the Future of Intelligent Networking

Published

on

Kindly share this post

TD Africa, in collaboration with Hewlett Packard Enterprise (HPE) Operated by Selectium, hosted a high-level partner engagement event on May 14, 2026, focused on emerging trends shaping the future of enterprise networking and infrastructure transformation.

TD Africa, HPE Drive Conversations on the Future of Intelligent Networking

TD Africa

The engagement brought together key partners to explore how organisations can build smarter, faster, and more secure network infrastructures capable of supporting today’s rapidly evolving digital economy. Central to the discussions was the growing relevance of WiFi 7 and the shift from traditional networking models to intelligent, AI-driven infrastructure ecosystems.

As businesses continue to accelerate digital transformation, conversations at the event centred on a critical question: Is your infrastructure ready for the speed of transformation? From edge-to-cloud connectivity and IoT integration to AI-enabled networking and advanced security frameworks, the session highlighted the increasing demand for agile, scalable, and resilient enterprise solutions.

Speaking at the event, Dr. Ifee Kojo, Country Manager, HPE Operated by Selectium, highlighted HPE’s commitment to helping organisations modernise their infrastructure and navigate the future of connectivity. “HPE is driving transformation across the entire technology ecosystem, from the data centre to the edge, from IoT to AI-powered connectivity.

“Our focus is on helping businesses strengthen security, improve scalability, and build intelligent infrastructures that support innovation and growth.

“Through our strong partner TD Africa, we can extend these solutions more effectively into the market, ensuring organisations have access to the right technologies needed to compete and thrive in a rapidly evolving digital world,” she said.

Also speaking, Chioma Chimere, Coordinating Managing Director at TD Africa, emphasised the importance of future-ready networking in enabling business resilience and long-term digital growth. “Networking today is no longer just about connectivity; it has become the backbone of enterprise transformation.

“As organisations embrace AI, cloud environments, remote operations, and data-driven systems, the need for secure, intelligent, and scalable infrastructure becomes even more critical.

“TD Africa is committed to ensuring our partners are equipped with the right technologies, insights, and support needed to navigate this shift successfully.

“Our collaboration with HPE reflects our shared commitment to helping businesses modernise confidently and prepare for the future of digital innovation,” she stated.

Through strategic collaborations with global Original Equipment Manufacturers (OEMs) like HPE, TD Africa continues to strengthen its position as a key distributor of enterprise and networking solutions across Africa, enabling partners and organisations to access cutting-edge technologies backed by technical expertise, market reach, and ecosystem support.


Kindly share this post
Continue Reading

E-Business

Jumia Nigeria Records Strong Q1 2026 Growth as Technology-Led Strategy Drives Market Expansion

Published

on

Kindly share this post

Jumia has announced strong first-quarter 2026 performance results, with Nigeria emerging as one of the company’s standout growth markets across Africa, reinforcing the country’s position as a critical driver of the company’s long-term expansion strategy.

According to the company’s Q1 2026 financial results released May 7th, 2026, Nigeria recorded a 42% year-on-year increase in physical goods Gross Merchandise Value (GMV), making it one of Jumia’s strongest-performing markets during the period.

Commenting on the performance, Temidayo Ojo, CEO of Jumia Nigeria, said, “Nigeria continues to demonstrate the strength and resilience of its digital commerce ecosystem. The growth we recorded in Q1 reflects increasing consumer confidence, stronger engagement across our platform, and our continued investment in technology, logistics, and customer experience.”

“We are seeing more Nigerians embrace e-commerce not just for convenience, but as a trusted part of everyday life. Our focus remains on building a platform that is more accessible, more reliable, and more relevant to the evolving needs of Nigerian consumers and sellers,” Ojo further mentioned.

The company attributed its broader growth trajectory to disciplined execution, operational efficiency, and increased deployment of technology and AI-driven systems across its operations.

According to the report, Jumia leveraged artificial intelligence and automation across operations, finance, customer support, cybersecurity, seller management, logistics, and technology teams to improve service quality while reducing operational costs company-wide.

The company also noted that technology and content expenses declined year-on-year due to ongoing headcount optimisation and savings from renegotiated technology contracts, while operational leverage continued to improve. They further highlighted increased use of AI tools among its technology teams, alongside automation in call centres and operational systems, as part of efforts to scale sustainably while improving efficiency across African markets.

Across the platform, Jumia reported significant gains in customer retention and marketplace engagement. Quarterly Active Customers reached 2.5 million, while physical goods orders climbed to 5.9 million in Q1 2026.

The company also expanded usage beyond major urban centres, with 62% of total orders now coming from secondary cities and upcountry regions, emphasising the growing reach of digital commerce across Africa.

Despite global economic pressures, including rising memory chip and CPU prices and supply chain disruptions linked to ongoing Middle East conflicts, the company reaffirmed its path toward profitability. Jumia stated that it remains on track to achieve Adjusted EBITDA breakeven and positive cash flow in Q4 2026, with full-year profitability targeted for 2027.


Kindly share this post
Continue Reading

Trending