News
Kaspersky says Phishing Diversified During COVID-19 Outbreak with 2 million Attacks in Q2 in Africa

Kaspersky analysis has revealed that phishing attacks are becoming increasingly more targeted. A number of new tricks have also been found – from HR dismissal emails to attacks disguised as delivery notifications.

As a result of such tendencies, security solutions have detected 2,023,501 phishing attacks in South Africa, Kenya, Egypt, Nigeria, Rwanda and Ethiopia. These and other findings are documented in Kaspersky’s new spam and phishing in Q2 2020 report.
Phishing is one of the oldest and most flexible types of social engineering attacks. They are used in many ways, and for different purposes, to lure unwary users to the site and trick them into entering personal information.
The latter often includes financial credentials such as bank account passwords or payment card details, or login details for social media accounts. In the wrong hands, this opens doors to various malicious operations, such as money being stolen or corporate networks being compromised. This makes phishing a popular initial infection method.
South African users have been influenced the most by this type of threat: there were 616,666 phishing attacks detected in 3 months. It was followed by Kenya (514,361), Egypt (492,532), Nigeria (299,426), Rwanda (68,931) and Ethiopia (31,585).
Phishing is a strong attack method because it is done at such a large scale. By sending massive waves of emails under the name of legitimate institutions or promoting fake pages, malicious users increase their chances of success in their hunt for innocent people’s credentials. The first six months of 2020, however, have shown a new aspect to this well-known form of attack.
Targeted attacks: Small businesses in focus
As Kaspersky analysis has indicated, in Q2 2020, phishers increasingly performed targeted attacks, with most of their focus on small companies. To attract attention, fraudsters forged emails and websites from organisations whose products or services could be purchased by potential victims. In the process of making these fake assets, fraudsters often did not even try to make the site appear authentic.
Such targeted phishing attacks can have serious consequences. Once a fraudster has gained access to an employee’s mailbox, they can use it to carry out further attacks on the company the employee works for, the rest of its staff, or even its contractors.
Jack of all trades: New tricks for old purposes
The news agenda, following the COVID-19 outbreak, has already influenced the “excuses” fraudsters use when asking for personal information. This included disguising their communications with unsuspecting users as:
Delivery services. At the peak of the pandemic, organisations responsible for delivering letters and parcels were in a hurry to notify recipients of possible delays. These are the types of emails that fraudsters began to fake, with victims asked to open an attachment to find out the address of a warehouse where they could pick up a shipment that did not reach its destination.
Postal services. Another relatively original move used by fraudsters was a message containing a small image of a postal receipt. The scammers expected that the intrigued recipient would accept the attachment (which, although it contained ‘JPG’ in the name, was an executable archive) as the full version and decide to open it. The Noon spyware was found in mailings such as these examined by Kaspersky researchers.
Financial services. Bank phishing attacks in the second quarter were often carried out using emails offering various benefits and bonuses to customers of credit institutions due to the pandemic. Emails received by users contained a file with instructions or links to get more details. As a result, depending on the scheme, fraudsters could gain access to users’ computers, personal data, or authentication data for various services.
HR services. The weakening of the economy during the pandemic in a number of countries caused a wave of unemployment, and fraudsters did not miss this opportunity to strike. Kaspersky experts encountered various mailings that announced, for example, some amendments to the medical leave procedure, or surprised the recipient with the news about their dismissal. In some attachments, there was a Trojan-Downloader.MSOffice.SLoad.gen file. This Trojan is most often used for downloading and installing encryptors.
“When summarising the results of the first quarter, we assumed that COVID-19 would be the main topic for spammers and phishers for the past few months. And it certainly happened. While there was the rare spam mailing sent out without mentioning the pandemic, phishers adapted their old schemes to make them relevant for the current news agenda, as well as come up with new tricks,” comments Tatyana Sidorina, security expert at Kaspersky.
Kaspersky experts advise users to take the following measures to protect themselves from phishing:
– Always check online addresses in unknown or unexpected messages, whether it is the web address of the site where you are being directed, the link address in a message and even the sender’s email address, to make sure they are genuine and that the link in the message doesn’t hide another hyperlink.
– If you are not sure that the website is genuine and secure, never enter your credentials. If you think that you may have entered your login and password on a fake page, immediately change your password and call your bank or other payment provider if you think your card details were compromised.
News
Trump Threatens More Strikes in Nigeria

President Donald Trump has warned that the United States could carry out further military strikes in Nigeria if Christians continue to be killed, reigniting a sensitive debate over religious violence and foreign intervention in Africa’s most populous nation.

President Donald Trump
Trump made the remarks in an interview with The New York Times, published on Thursday, while responding to questions about a US military strike carried out in Nigeria on Christmas Day.
At the time, the US military said the operation targeted Islamic State militants in north-west Nigeria and was conducted at the request of the Nigerian government.
Nigeria, however, described the operation as a joint counterterrorism effort, stressing that it was aimed at armed groups designated as terrorists and “had nothing to do with a particular religion”.
“I’d love to make it a one-time strike,” Trump was quoted as saying. “But if they continue to kill Christians, it will be a many-time strike.”
Pressed on comments by his own Africa adviser that extremist groups such as Islamic State and Boko Haram have killed more Muslims than Christians in Nigeria, Trump acknowledged that Muslims were also victims but insisted that Christians were being targeted disproportionately.
“I think that Muslims are being killed also in Nigeria. But it’s mostly Christians,” he said.
Trump has repeatedly raised alarms about the safety of Christians in Nigeria, beginning in late October when he warned that Christianity faced what he described as an “existential threat” in the country. He has accused Nigerian authorities of failing to adequately protect Christian communities and has openly threatened US military intervention if the violence continues.
Nigeria has firmly rejected claims of systematic persecution of Christians. The government maintains that the country’s security challenges are complex and largely driven by insurgency, banditry and criminal violence rather than religious targeting.
With a population of more than 230 million people, Nigeria is almost evenly divided between Christians, who are concentrated mainly in the south, and Muslims, who predominate in the north. Islamist insurgencies, particularly Boko Haram and its offshoots, have plagued parts of northern Nigeria for more than a decade, killing thousands and displacing millions.
Nigerian authorities have repeatedly pointed out that militant attacks have claimed the lives of both Muslims and Christians, arguing that framing the violence along religious lines oversimplifies the crisis and risks inflaming tensions.
Following Trump’s earlier threats, the Nigerian government said it was willing to continue cooperating with Washington in combating terrorism but rejected language suggesting that Christians alone were under threat.
The latest comments are likely to strain diplomatic relations further, as Nigeria balances its partnership with the United States against concerns over sovereignty, security cooperation and the portrayal of its internal conflicts on the global stage.
News
OpenAI Launches ChatGPT Health

OpenAI maker of ChatGPT is rolling out a health-focused feature to the generative artificial intelligence (AI) tool that’s used by nearly a billion users.

Named ChatGPT Health, the new feature aims to provide users with health and wellness information. This, as health is one of the most common ways people use ChatGPT, according to OpenAI.
In a blog post, Microsoft-backed OpenAI says de-identified analysis of conversations show that over 230 million people globally ask health and wellness-related questions on ChatGPT every week.
ChatGPT Health will also “securely” connect medical records and wellness apps to ground conversations with a user’s own health information, making responses more relevant and useful.
“Designed in close collaboration with physicians, ChatGPT Health helps people take a more active role in understanding and managing their health and wellness – while supporting, not replacing, care from clinicians.”
According to OpenAI, health information is often scattered across portals, apps, wearables, PDFs, and medical notes making it hard to see the full picture, and people are left to navigate a complex healthcare system on their own.
“ChatGPT Health builds on these so responses are informed by your health information and context. You can now securely connect medical records and wellness apps – like Apple Health, Function, and MyFitnessPal – so ChatGPT can help you understand recent test results, prepare for appointments with your doctor, get advice on how to approach your diet and workout routine, or understand the trade-offs of different insurance options based on your healthcare patterns.”
According to the company, ChatGPT Health is designed to support, not replace, medical care, adding that it is not intended for diagnosis or treatment. “Instead, it helps you navigate everyday questions and understand patterns over time – not just moments of illness – so you can feel more informed and prepared for important medical conversations.
“To keep your health information protected and secure, Health operates as a separate space with enhanced privacy to protect sensitive data. Conversations in Health are not used to train our foundation models. If you start a health-related conversation in ChatGPT, we’ll suggest moving into Health for these additional protections.”
OpenAI adds that access to ChatGPT Health has started with a small group of early users to learn and continue refining the experience, adding that users with ChatGPT Free, Go, Plus, and Pro plans outside of the European Economic Area, Switzerland, and the UK are eligible.
“As we make improvements, we plan to expand access and make Health available to all users on web and iOS in the coming weeks.
“Medical record integrations and some apps are available in the US only, and connecting Apple Health requires iOS.”
News
Kaspersky Shares AI Cybersecurity Predictions for 2026

Kaspersky experts outline how the rapid development of AI is reshaping the cybersecurity landscape in 2026, both for individual users and for businesses. Large language models (LLMs) are influencing defensive capabilities while simultaneously expanding opportunities for threat actors.

Deepfakes are becoming a mainstream technology, and awareness will continue to grow. Companies are increasingly discussing the risks of synthetic content and training employees to reduce the likelihood of falling victim to it. As the volume of deepfakes grows, so does the range of formats in which they appear.
At the same time, awareness is rising not only within organisations but also among regular users: end consumers encounter fake content more often and better understand the nature of such threats. As a result, deepfakes are becoming a stable element of the security agenda, requiring a systematic approach to training and internal policies.
Deepfake quality will improve through better audio and a lowering barrier to entry. The visual quality of deepfakes is already high, while realistic audio remains the main area for future growth.
At the same time, content generation tools are becoming easier to use: even non-experts can now create a mid-quality deepfake in just a few clicks. As a result, the average quality continues to rise, creation becomes accessible to a far broader audience, and these capabilities will inevitably continue to be leveraged by cybercriminals.
Online deepfakes will continue to evolve but remain tools for advanced users. Real-time face and voice swapping technologies are improving, but their setup still requires more advanced technical skills. Wide adoption is unlikely, yet the risks in targeted scenarios will grow: increasing realism and the ability to manipulate video through virtual cameras make such attacks more convincing.
Efforts to develop a reliable system for labelling AI-generated content will continue. There are still no unified criteria for reliably identifying synthetic content, and current labels are easy to bypass or remove, especially when working with open-source models. For this reason, new technical and regulatory initiatives aimed at addressing the problem are likely to emerge.
Open-weight models will approach top closed models in many cybersecurity-related tasks, which create more opportunities for misuse. Closed models still offer stricter control mechanisms and safeguards, limiting abuse.
However, open-source systems are rapidly catching up in functionality and circulate without comparable restrictions. This blurs the difference between proprietary models and open-source models both of which can be used efficiently for undesired or malicious purposes.
The line between legitimate and fraudulent AI-generated content will become increasingly blurred. AI can already produce well-crafted scam emails, convincing visual identities, and high-quality phishing pages.
At the same time, major brands are adopting synthetic materials in advertising, making AI-generated content look familiar and visually “normal.” As a result, distinguishing real from fake will become even more challenging, both for users and for automated detection systems.
AI will become a cross-chain tool in cyberattacks and be used across most stages of the kill chain. Threat actors already employ LLMs to write code, build infrastructure, and automate operational tasks.
Further advances will reinforce this trend: AI will increasingly support multiple stages of an attack, from preparation and communication to assembling malicious components, probing for vulnerabilities and deploying tools. Attackers will also work to hide signs of AI involvement, making such operations harder to analyse.
“While AI tools are being used in cyberattacks, they are also becoming a more common tool in security analysis and influence how SOC teams work. Agent-based systems will be able to continuously scan infrastructure, identify vulnerabilities, and gather contextual information for investigations, reducing the amount of manual routine work.
“As a result, specialists will shift from manually searching for data to making decisions based on already-prepared context. In parallel, security tools will transition to natural-language interfaces, enabling prompts instead of complex technical queries,” adds Vladislav Tushkanov, Research Development Group Manager at Kaspersky.
News2 days agoKaspersky Shares AI Cybersecurity Predictions for 2026
General News2 days agoPalmPay Deepens Its Long-Term Commitment in Nigeria with New Office @ Yaba
Broadcasting2 days agoYouth Talent Takes Center Stage as T2 Ignites High-Octane Rap Battles @ Carnival Calabar
E-Financial2 days agoWema Bank Launches SAW AI Voice Assistant for Seamless Banking on ALAT 2.0
E-Financial2 days agoKuda Microfinance Bank Releases ‘My Year on Kuda’ 2025 Financial Recap
E-Financial2 days agoFidelity Bank Completes N500Bn Capital Raise ahead of Deadline
E-Business2 days agoKonga launches Jara sales with 25% discount on Starlink kits, free delivery
Broadcasting2 days agoAig-Imoukhuede Foundation Wrapped Up 2025 with Real Change in Governance, Health, Media Across Africa
















