E-Business
ChatGPT-mimicking Cyberthreats Surge 115% in Early 2025, SMBs Increasingly Targeted

In 2025, nearly 8,500 users from small and medium-sized businesses (SMBs) globally faced cyberattacks where malicious or unwanted software was disguised as popular online productivity tools, Kaspersky reports.

Based on the unique malicious and unwanted files observed, the most common lures included Zoom and Microsoft Office, with newer AI-based services like ChatGPT and DeepSeek being increasingly exploited by attackers. Kaspersky has released threat analysis and mitigation strategies to help SMBs respond.
Kaspersky analysts explored how frequently malicious and unwanted software are disguised as legitimate applications commonly used by SMBs, using a sample of 12 online productivity apps. In total, Kaspersky observed more than 4,000 unique malicious and unwanted files disguised as popular apps in 2025. With the growing popularity of AI services, cybercriminals are increasingly disguising malware as AI tools.
The number of cyberthreats mimicking ChatGPT increased by 115% in the first four months of 2025 compared to the same period last year, reaching 177 unique malicious and unwanted files. Another popular AI tool, DeepSeek, accounted for 83 files. This large language model launched in 2025 immediately appeared on the list of impersonated tools.
“Interestingly, threat actors are rather picky in choosing an AI tool as bait. For example, no malicious files mimicking Perplexity were observed. The likelihood that an attacker will use a tool as a disguise for malware or other types of unwanted software directly depends on the service’s popularity and hype around it. The more publicity and conversation there is around a tool, the more likely a user will come across a fake package on the Internet.
To be on the safe side, SMB employees – as well as regular users – should exercise caution when looking for software on the Internet or coming across too-good-to-be-true subscription deals. Always check the correct spelling of the website and links in suspicious emails. In many cases these links may turn out to be phishing or a link that downloads malicious or potentially unwanted software,” says Vasily Kolesnikov, security expert at Kaspersky.
Another cybercriminal tactic to look for in 2025 is the growing use of collaboration platform brands to trick users into downloading or launching malware. The number of malicious and unwanted software files disguised as Zoom increased by nearly 13% in 2025, reaching 1,652, while such names as “Microsoft Teams” and “Google Drive” saw increases of 100% and 12%, respectively, with 206 and 132 cases.
This pattern likely reflects the normalisation of remote work and geographically distributed teams, which has made these platforms integral to business operations across industries.
Among the analysed sample, the highest number of files mimicked Zoom, accounting for nearly 41% of all unique files detected. Microsoft Office applications remained frequent targets for impersonation: Outlook and PowerPoint each accounted for 16%, Excel for nearly 12%, while Word and Teams made up 9% and 5%, respectively.
The top threats targeting small and medium businesses in 2025 included downloaders, trojans and adware.
Phishing and spam
Apart from malware threats, Kaspersky continues to observe a wide range of phishing and scam schemes targeting SMBs. Attackers aim to steal login credentials for various services — from delivery platforms to banking systems — or manipulate victims into sending them money through deceptive tactics. One example is a phishing attempt targeting Google Accounts.
Attackers promise potential victims to increase sales by advertising their company on X, with the ultimate goal being to steal their credentials.
Beyond phishing, SMBs are flooded with spam emails. Not surprisingly, AI has also made its way into the spam folder — for example, with offers for automating various business processes.
In general, Kaspersky observes phishing and spam offers crafted to reflect the typical needs of small businesses, promising attractive deals on email marketing or loans, offering services such as reputation management, content creation, or lead generation, and more.
E-Business
Study Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials

Kaspersky analysed phishing and scam campaigns observed from January through September 2025 and found that 88.5% of attacks globally sought credentials for various online accounts.

Another 9.5% targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details.
According to data from Kaspersky, over 38 million phishing links were clicked in Africa in the previous year (from November 2024 to October 2025) – all of which were detected and blocked by Kaspersky solutions.
Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.
Kaspersky research shows that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.
Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as $50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.
According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from $0.90 for global Internet portals to $105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about $15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.
As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.
“Our analysis shows that credentials account for nearly 90% of phishing attempts. Once collected, logins, passwords, phone numbers, and personal details are aggregated, checked, and resold, sometimes years after the initial theft.
Combined with new information, even old credentials can enable account takeovers and targeted attacks against both individuals and organisations.
By leveraging open-source intelligence and old breach data, attackers can craft highly personalised scams, turning one-time victims into long-term targets for identity theft, blackmail, or financial fraud,” said Olga Altukhova, senior web content analyst at Kaspersky.
E-Business
Study Reveals Majority of IT Professionals Show Openness to Cyber Immunity

The cybersecurity landscape is evolving rapidly, with organisations seeking more robust ways to protect their digital assets. A recent global study conducted by Kaspersky reveals a growing shift toward proactive security strategies, particularly the adoption of Secure by Design development and Cyber Immunity – an innovative approach that embeds resilience directly into system architecture.

The study highlights that 90% of cybersecurity professionals surveyed in the Middle East, Turkiye and Africa (META) region are familiar with Secure by Design development. This methodology integrates security into the very fabric of a system from its inception, rather than treating it as an afterthought.
Such an approach is already employed in high-stakes industries like aerospace, where security cannot be bolted on later – it must be intrinsic. Despite its advantages, however, adoption has been slow due to challenges related to standardisation and cost.
Cyber Immunity is the next frontier in cybersecurity
Building on Secure by Design principles, Cyber Immunity takes cybersecurity a step further by creating systems that inherently resist attacks without the need for constant patching or additional security layers. The study reveals that most experts are familiar with Cyber Immunity but interpret it differently.
When asked what they associate with the term, 64% of respondents in the META region linked it to Secure by Design systems that remain resilient under attack, while 56% viewed it as a combination of technology and policy measures that block cybercriminal access. Another 48% connected it to highly skilled cybersecurity teams, indicating that while awareness is high, a unified understanding is still developing.
The growing demand for proactive security
One of the most striking findings is the optimism surrounding inherently secure systems. Over half of respondents in the META region (63%) believe it is already possible or definitely achievable to design systems capable of withstanding cyberattacks without relying on additional security solutions.
Another 32% think it might be possible, reflecting openness to this idea despite some uncertainty. This shift in mindset aligns with a broader industry trend: traditional reactive security measures are no longer sufficient.
With AI-powered threats and increasingly sophisticated attacks, organisations need solutions that do more than just detect breaches—they must prevent them by design.
Integrating Cyber Immunity into security strategies
The study emphasises that resilience, expertise, and flexibility will define the next generation of cybersecurity. While Secure by Design provides the methodology, Cyber Immunity represents the ultimate goal—systems so robust that they minimise reliance on external defences.
“For companies looking ahead, Cyber Immunity offers more than just protection — it brings clear business benefits. When systems are built to be secure from the ground up, there’s less need for constant updates, patches, and extra security tools. That means fewer costs, less strain on IT teams, and stronger, more reliable protection over time,” said Dmitry Lukiyan, Head of KasperskyOS Business Unit.
Most importantly in today’s threat landscape, Cyber Immunity offers robust protection against next-generation challenges — including AI-driven attacks capable of outmaneuvering traditional security measures.
When security becomes an intrinsic property of system architecture rather than an external addition, businesses gain more than just protection—they secure a competitive market advantage.
This proactive approach future-proofs critical infrastructure, enabling organisations to operate confidently even as threats evolve. It transforms cybersecurity from a defensive necessity into a strategic differentiator that accelerates digital transformation while mitigating risk.
As the cybersecurity environment becomes more complex, Cyber Immunity is emerging as a vital strategy. Organisations that adopt it now will not only enhance their protection but also position themselves ahead of the curve in an increasingly volatile digital world.
E-Business
Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga
The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.
To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.
Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.
Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”
He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”
Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.
As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.
Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.
General News2 days agoMinistry of Finance Leads FG-Backed Deal to Deliver Quality Homes and Boost Agriculture in Niger State
News2 days agoSERAP Sues INEC Over Alleged ₦55.9Bn Election Funds Diversion
Telecom2 days agoFG Plans to Invest $460m World Bank Loan in Fibre Infrastructure
News2 days agoAI Founders and Developers to Converge in Lagos for AI in Action 2026 conference
E-Financial2 days agoNDIC Declares Second Liquidation Dividend for Heritage Bank Depositors
News2 days agoFG Inaugurates N40Bn CCTV Control Centre for Third Mainland Bridge
General News2 days agoTax Reforms Panel Rejects KPMG’s Critique of New Laws
General News2 days agoIndonesia Blocks Elon Musk’s Grok Over Deepfake Concerns
















