E-Business
Sophos Schools Google, Users After ‘Docs’ Users’ Phishing Scam

Following the disclosure by Google saying it has stopped a phishing email that reached about a million of its users, security firm Sophos has identified a number of factors Google should consider, going forward, on how best to manage cases like this.
Recall, the scam claimed to come from Google Docs – a service that allows people to share and edit documents online.
Users who clicked a link and followed instructions, risked giving the hackers access to their email accounts.
Google said it had stopped the attack “within approximately one hour”, including through “removing fake pages and applications”.
“While contact information was accessed and used by the campaign, our investigations show that no other data was exposed,” Google said in an updated statement.
“There’s no further action users need to take regarding this event; users who want to review third party apps connected to their account can visit Google Security Checkup.”
In an email to Nigeria CommunicationsWeek Chester Wisniewski, principal research scientist, Sophos, observed, “First and foremost, this is an abuse of Google’s APIs. While at first glance it appears to be a phishing attack, the emails come from Google and you are logging into the real Google”.
Wisniewski said that attacks on systems that are open for anyone to sign up as a developer using OAuth have been vulnerable to this type of attack for a long time, and the onus is on Google to do a better job vetting application developers.
“This is no different than the abuse of the Google Play store by malware authors. There is very little individuals can do other than be forever suspicious about legitimate requests from services provided by Google, Twitter, Facebook and other online services that use OAuth with an un-vetted application developer program. Twitter’s users were attacked using these techniques a few years back. Unfortunately, Google has also fallen victim to a similar attack vector. When users see official emails from Google and official login pages used in scams, this leads the goodwill Google has garnered from its users to be potentially damaged. All providers of OAuth have a responsibility to police the use of their platforms to stop users from being tricked through official requests from services like Google, Twitter and Facebook.
“We do suggest that users keep an eye on social media. As the Google Doc “phishing” attempt demonstrates, Twitter is a great early-warning system. There’s little doubt that the tweeted warnings saved people from being victimized.
“As a reminder, users should check the apps they have approved to access their accounts and remove anything that may be suspicious on all OAuth-based platforms. For Google it is under your Google account -> Sign-in & Security -> Connected apps & sites. On Twitter and Facebook it is Settings & Privacy -> Apps.
Sophos also went ahead to demonstrate how this type of attacks worked:
You get a real email from Google saying someone wants to share a file with you.
You get sent to a real Google login page and sign in.
You get a prompt that an “add on” wants access to your mail and contacts. The developer name is listed as “Google Docs,” but it could say anything (this is where Google could do more to prevent this).
The only way to attempt to check if it is real is to click on “Google Docs” and see the actual account creating the request, but it could say many believable things and there is no specific thing to watch for.
“The only reliable way to not fall victim is to never accept apps connecting to your account and requesting access to read/write your mail and contacts, or just about any other thing they might request access to unless you are specifically trying to hook into some new service, which you still may not be able to trust”.
Wisniewski also warned that when attacks like this happen, “it’s a good reminder to go back to your social media accounts and review what applications you’ve given permission to access your information and revoke permission if you no longer trust or use that particular app.”
E-Business
Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga
The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.
To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.
Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.
Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”
He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”
Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.
As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.
Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.
E-Business
Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.
When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.
At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.
“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.
E-Business
Galaxy Backbone Celebrates the Federal Government’s Paperless Civil Service Milestone

Galaxy Backbone (GBB) aligns with and celebrates the successful announcement by the Office of the Head of the Civil Service of the Federation on the achievement of a Paperless Civil Service, a significant milestone in Nigeria’s public sector reform and digital transformation agenda.

The milestone was formally highlighted at a press briefing led by the Head of the Civil Service of the Federation, Mrs. Didi Esther Walson-Jack, who commended Galaxy Backbone for its sustained support and contribution throughout the implementation of the programme.
GBB has played a critical role in enabling this transition by providing secure, scalable, and shared digital infrastructure that supports the digitisation of government processes across Ministries, Departments and Agencies (MDAs). Through the 1Government Cloud, MDAs have been empowered to migrate from paper-based workflows to digital platforms, improving efficiency, collaboration, data security, and service delivery across the Federal Civil Service.
In addition, GovMail, GBB’s secure government email platform, has strengthened official communication, enhanced records management, and reinforced cybersecurity standards—key pillars in sustaining a paperless operating environment.
Galaxy Backbone acknowledges the collective efforts of the Office of the Head of the Civil Service of the Federation, Permanent Secretaries, Directors of ICT, consultants, partners, and dedicated public servants whose commitment and collaboration ensured the smooth delivery of this initiative.
The Managing Director/Chief Executive Officer of Galaxy Backbone, Prof. Ibrahim Adeyanju, was represented at the press briefing by Akintayo Bamisaye, Acting Group Head, Research, Digital Innovation and Skills Department (RDIS).
GBB describes the achievement as a strong close to 2025 and reaffirms its commitment to supporting the Federal Government in building a modern, efficient, and digitally enabled public service.
News2 days agoCourt Sends Faleti, Ex-Lagos Director to Jail for Stealing ₦48.9m from Access Bank
E-Financial2 days agoRemita Powers over ₦100 Trillion in Payments as Nigeria’s Digital Economy Expands
E-Financial2 days agoWhy 2026 Must Be the Year Nigeria’s Economy Works for All
E-Financial2 days agoFlutterwave Acquires Nigeria’s Mono in $25m-$40m All-Stock Deal
E-Financial2 days ago2026: SEC to Review Rules to Incentivise SME Listings
General News2 days agoNigeria Targets Satellite-to-Mobile Services in Draft Spectrum Roadmap
Telecom2 days agoSamsung Plans to Double AI Mobile Devices to 800 million Units this Year
Telecom2 days agoMENXTT NG to pre-install Bitdefender Antivirus on all laptops from 2026













