Connect with us

E-Business

Banks, Internet Firms Fight Spam

Published

on

Kindly share this post

Some of the world’s biggest Internet companies and financial services firms have developed a new approach to fighting e-mail spam that they hope will reduce online scams.
Facebook, Google and Microsoft have joined with financial firms Bank of America, Fidelity Investments and eBay’s PayPal to create a set of industry standards for preventing criminals from sending out spam e-mails that appear to come from corporate e-mail addresses.
Fraudsters often pose as banks and other trusted firms in attempts to persuade e-mail recipients to provide payment card numbers, bank account information and other personal data, or click on links that infect computers with malicious software.
The new approach calls for e-mail providers and businesses to attack spammers by coordinating on a massive scale the use of two existing technologies for e-mail authentication known by the acronyms SPF and DKIM, which have yet to be widely adopted.
PayPal is one company that currently uses Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) technology standards to fight e-mail spoofing, but only through partnerships with Yahoo and Google, said Brett McDowell, a security manager at PayPal who serves as chairman of the group that developed the new standard.
The group goes by the name DMARC.org, which stands for Domain-based Message Authentication, Reporting and Conformance.
If Yahoo or Google get an e-mail claiming to come from PayPal that is not properly authenticated with SPF or DKIM, the e-mail is not delivered, he said. But if fraudsters send spoofed PayPal e-mail to other e-mail providers, it might get through.
“What we need is an Internet standard that allows this level of protection to work at scale – without any discussion, without any partner agreements, that is what DMARC does, McDowell said.
Other companies involved in the group include American Greetings, LinkedIn and Yahoo, as well as privately held Agari, Cloudmark, eCert, Return Path and the Trusted Domain Project.
Michael Versace, IDC security analyst, said the approach recommended by the group appeared to be effective and inexpensive to implement.
Yet he said the industry should keep developing new technologies to fight spammers because he expects cyber criminals will eventually figure out how to circumvent the DMARC protections.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Nigeria to Launch Certificate-Based Digital Literacy Course Nationwide

Published

on

Kindly share this post

The Federal Government of Nigeria is set to launch a certificate-based digital literacy course across universities nationwide. This initiative aims to enhance students’ proficiency in digital skills, preparing them for the evolving technological landscape.

The program will be implemented in collaboration with the National Information Technology Development Agency (NITDA) and other stakeholders. It aligns with the government’s goal to achieve a 70% digital literacy rate among Nigerians within three years, targeting the training of 30 million Nigerians.

To further promote the Digital4All initiative, Director General Kashifu Inuwa Abdullahi CCIE led a delegation from NITDA to meet with the Executive Secretary of the National Universities Commission (NUC), Chris J. Maiyaki, to discuss collaboration on digital literacy.

The discussion focused on integrating digital literacy and skills as a general course in all universities to accelerate the goal of achieving 70% digital literacy by 2027 and positioning the nation as a global talent exporter. This aligns with the agency’s strategy of fostering digital literacy and cultivating talent in line with President Tinubu’s Renewed Hope Agenda.

During the visit, the Executive Secretary expressed readiness to collaborate with the agency in embedding and streamlining the initiative to further promote the digital economy.

This collaboration underscores the importance of integrating digital literacy into higher education curricula to equip students with essential skills for the digital age. By embedding digital literacy into university programs, Nigeria aims to produce a workforce adept in technology, thereby enhancing the nation’s competitiveness in the global digital economy.


Kindly share this post
Continue Reading

E-Business

Firm Predicts AI, Privacy to Shape Consumer Cybersecurity Landscape in 2025

Published

on

Kindly share this post

According to Kaspersky’s latest report, artificial intelligence (AI) will become an integral part of daily life, while privacy concerns around biometric data and advanced technologies will take center stage in 2025. These forecasts are part of the annual Kaspersky Security Bulletin series, which provides an outlook on the cybersecurity trends and threats expected to impact consumers in the coming year.

AI becomes an everyday reality

AI is predicted to fully integrate into daily life in 2025, becoming a standard tool rather than a novel technology. With prominent operating systems like iOS and Android rolling out AI-enhanced features, people will increasingly rely on AI for communication, workflows, and creative tasks.

However, this normalisation also brings challenges, particularly as personalised deepfakes become increasingly sophisticated in the absence of reliable detection tools.

Privacy regulations will expand user data ownership

The growing emphasis on privacy is expected to lead to new regulations that strengthen user control over personal data. By 2025, individuals may gain the right to monetise their data, transfer it easily across platforms, and benefit from simplified consent processes.

Global frameworks, such as the EU’s GDPR, California’s CPRA and South Africa’s POPIA, continue to inspire reforms worldwide, while decentralised storage technologies could further strengthen user autonomy over their information.

Fraudsters will continue to exploit premieres and releases

Cybercriminals are expected to target prominent gaming, console, and film launches in 2025. Titles like Mafia: The Old Country, Civilization VII, and Death Stranding 2, as well as the anticipated Nintendo Switch 2, are likely to attract scams involving fake pre-orders, counterfeit rootkits, and malicious downloads.

Similarly, blockbuster films like Superman and Jurassic World Rebirth may trigger phishing campaigns and counterfeit merchandise fraud aimed at enthusiastic fanbases.

Political polarisation will fuel cyberbullying

Increasing political polarisation is expected to exacerbate cyberbullying in 2025. Social media algorithms that amplify divisive content, combined with the widespread availability of AI tools for creating deepfakes and doctored posts, are likely to intensify online harassment. Cross-border cyberbullying could also escalate as global platforms facilitate the targeting of individuals based on their political beliefs.

Rising number of subscription services will fuel fraud risks

As the global economy shifts further towards subscription-based models, a rise in fraud related to fake subscription promotions is expected. Cybercriminals are expected to create counterfeit services that mimic legitimate platforms, aiming to deceive users into providing personal and financial information, resulting in identity theft and financial losses.

Additionally, the growth of unofficial resources that provide discounted or free access to subscription services is expected to become a significant threat vector, exposing users to phishing attacks, malware, and data breaches.

Prohibition of social media for children may lead to broader user restrictions

Australia’s proposed legislation to ban social media access for children under 16 could set a global precedent. If implemented successfully, the restriction could pave the way for broader limitations on access for other demographics.

Platforms like Instagram have already begun adopting AI-powered age-verification systems, signaling a shift toward stricter governance of online spaces.

“As we look to 2025, the most significant impact on consumers is expected to arise from the intersection of innovation and regulation. Advances in AI, privacy protection, and data ownership frameworks will reshape the way people interact with technology and manage their digital lives.

These developments hold immense potential but also demand careful oversight to ensure they serve consumer interests,” said Anna Larkina, Kaspersky privacy expert.


Kindly share this post
Continue Reading

E-Business

Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences

Published

on

Kindly share this post

A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence (AI) in cyberattacks.

According to the findings, 70% of surveyed companies in the Middle East, Turkiye and Africa (META) region reported a rise in cyber incidents over the past year, with over half of respondents (53%) noting that many of these attacks were likely AI-driven.

The study underscores the reality that AI, which has revolutionised numerous industries, is now also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.

In its latest study titled “Cyber defense & AI: Are you ready to protect your organisation?” Kaspersky gathered the opinions of IT Security and Information Security professionals working for SMEs and Enterprise-level companies regarding new challenges in protecting their organisations against cyberattacks involving the use of AI.

Leveraging AI by cybercriminals is a serious concern for 73% of respondents from the META region. The pressure of this challenge is pushing companies to reassess their cybersecurity strategies and look for solutions that are both proactive and comprehensive.

To effectively tackle AI-amplified threats, businesses in the META region consider regular training to build internal expertise (94%), highly qualified personnel (94%), and relevant external cybersecurity expertise (93%) as the most important factors for protecting their organisations.

They also recognise the importance of having enough staff in their IT teams (91%) and using third-party security solutions (89%).

Despite rising awareness, the study reveals a concerning gap in readiness among many companies.

Over half of the organisations surveyed in the META region lack crucial resources needed to address these sophisticated threats – 56% don’t have the relevant external cybersecurity expertise at their disposal, 51% report that their IT teams are not large enough, 44% lack highly qualified staff, and 45% fall short in regular training efforts.

Additionally, 49% of respondents do not think they have adequate security solutions in place, exposing them to potential vulnerabilities. While most respondents claim to know how to address this lack of resources, the fact remains that they aren’t in place.

“The cybersecurity landscape today mirrors past challenges, with businesses questioning if current solutions suffice. Ransomware, once a primary threat, now demonstrates a dangerous surge, and business decision-makers start questioning the causes of this resurgence.

“The recent hype around AI offers an easy, if not entirely correct explanation. In reality, while using AI to create convincing phishing messages or more effective reconnaissance may be of some help, the root causes are most often more straightforward: cybercriminals have become more organised, better at collaborating, developing innovative attack strategies, and lowering the barriers for less skilled and resourceful attackers.

“So, while it’s useful to keep an eye on AI progress that can enable both attackers and defenders with new options, there are solid strategies companies can – and should – implement immediately.

“Companies should prioritise securing critical IT infrastructure with robust, multi-layered solutions that offer a unified security context. An XDR ecosystem, combined with skilled expertise – whether in-house or through a managed service – can greatly enhance defences.

“Additionally, ongoing employee training, including cybersecurity basics and safe AI practices, adds another critical layer of protection for the organisation,”  says Oleg Gorobets, corporate infrastructure protection expert at Kaspersky.

 


Kindly share this post
Continue Reading

Trending