News
Cybercriminals Turn to Deepfakes, Target Enterprise Networks

The year 2020 will see a new level of cyber-attacks – fake audio-visuals are forecast to be increasingly used by criminals as a social engineering tactic to extort money from companies and individuals.
This is according to security experts, who warn that deepfakes will transition from being predominantly used to create fake celebrity pornographic videos to the new threat used to sabotage enterprises for financial gains.
Anna Collard, founder and MD of KnowBe4 company Popcorn Training, says deepfakes are spilling beyond the world of celebrity cyber bullying and into company systems.
“Most deepfake technologies use existing media, video or audio typically to train an AI to create a virtual model of the item they want to change. While they can be used for entertainment in applications such as those on phones that swap faces, they can also be used for deception and fraud, to deceive employees into transferring funds or making critical decisions.
“Imagine getting a phone call or voicemail from an executive asking you to transfer money into a bank account. If you believe the person calling is the executive, why would you question the request?” Collard asks.
According to experts, only one social media profile picture is sufficient to create a deepfake video.
Deepfake can also be used for anything from traditional blackmail of politicians, to election influencing through releasing fake videos of candidates, to cyber bullying victims.
According to Forrester’s 2020 Predictions, deepfakes alone will cost businesses over a quarter of a billion dollars, as attackers use AI, machine learning and natural language tools to generate fake audio and video designed to deceive employees into releasing company funds.
Jonathan Miles, head of strategic intelligence and security research at Mimecast, says in the same ways as threat actors impersonate e-mail addresses, domains, subdomains, landing pages, Web sites, mobile apps, and social media profiles, deepfakes are emerging as a new threat, targeting enterprises.
“Deepfake attacks, or voice phishing attacks, are an extension of business e-mail compromise (BEC) and have introduced a new dimension to the attacker’s arsenal. This methodology is becoming more prevalent as an additional vector used for eliciting fraudulent fund transfers.
“Many people are aware of fake videos of politicians, carefully crafted to convey false messages and statements that call their integrity into question. But with companies becoming more vocal and visible on social media, and CEOs speaking out about purpose-driven brand strategies using videos and images, there is a risk that influential business leaders will provide source material for kicking off possible deepfake attacks,” he explains.
According to security firm Trend Micro, deepfake ransomware is among the top ten security trends to watch out for in 2020.
Deepfake audio fraud is a new cyber attack tool, further highlighting how AI can be abused by cyber criminals to make scams harder to detect, often used alongside BEC scams, notes the report.
“For years, email-based scams have been largely perpetrated by fraudsters in West Africa – and we do not expect this to change. We do foresee fraud advancing in 2020, with AI technology being used to create highly believable counterfeits in image, video, or audio format that depict individuals saying or doing things that did not occur.
“The rise of deepfakes raises concern. It inevitably moves from creating fake celebrity pornographic videos to manipulating company employees and procedures.”
This was exemplified when a fake, AI-generated voice of an energy firm’s CEO was used to defraud the company of $243 000.
Experts also believe newsrooms, journalists in particular, could also become a prime target for deepfake creators.
Preventing deepfakes
According to Reuters, China has introduced a new lawgoverning video and audio content online, banning the publishing and distribution of “fake news” created with technologies such as AI and virtual reality, effective from January 2020.
Google, in partnership with Jigsaw, has released a vast dataset of deepfake videos to help researchers in detecting forgeries. It includes 3 000 AI-generated videos that were made using various publicly available algorithms.
Collard believes as scammers constantly seek new ways of earning trust from their victims, the crime is expected to also be increasingly used as part of online dating scams.
News
FG, World Bank Launch $65m SPESSE Funding for 24,000 Nigerians

Federal government, in partnership with the World Bank, has launched a fresh $65 million funding phase of the Sustainable Procurement, Environmental and Social Standards Enhancement (SPESSE) project aimed at benefiting more than 24,000 Nigerians through professional training and institutional capacity development.

The initiative, coordinated by the National Universities Commission (NUC), is designed to strengthen procurement systems, environmental management and social standards across public and private institutions, while promoting transparency, accountability and sustainable development practices nationwide.
Abdullahi Ribadu, executive secretary of the Commission, disclosed this in Abuja during the signing of performance contracts for the additional SPESSE financing. He explained that the intervention builds on the gains of the initial $80 million SPESSE project, which became effective in 2021.
According to Ribadu, the programme has significantly improved institutional frameworks and developed professional expertise in key governance sectors. He noted that the initiative was introduced to address the shortage of qualified professionals in procurement, environmental management and social standards within both public and private institutions.
He said: “With the support of the World Bank and under the coordination of the NUC, six centres of excellence were established across the six geopolitical zones to provide sustainable capacity building in these critical sectors”.
Ribadu stated that the participating universities were selected through a transparent and competitive process based on institutional readiness, quality assurance and sustainability.
He added that the institutions have continued to produce skilled manpower capable of advancing transparency, environmental responsibility and inclusive national development.
He described the contract signing ceremony as a renewed commitment to accountability, sustainability and institutional excellence, noting that the centres have recorded major achievements, including the introduction of specialised academic programmes ranging from short courses to undergraduate and postgraduate degrees.
The NUC boss further disclosed that three of the six centres have already commenced PhD programmes, while the remaining centres are expected to begin by July 2026.
He added that under the new funding phase, the Commission targets at least 60 PhD graduates, enrolment of 60 foreign students, staff internships and expanded student exchange programmes with international institutions.
Also speaking, Adebowale Adedokun, director-general, Bureau of Public Procurement (BPP), said the project has so far trained more than 2,700 officers from both the public and private sectors to improve procurement competence nationwide.
He said the next phase would support the rollout of Nigeria’s electronic procurement system and expand online capacity-building programmes for policymakers and small and medium-scale enterprises involved in managing public funds.
On his part, Ishtiak Siddique, World Bank Task Team Leader for SPESSE, revealed that more than 40,000 participants had benefited from training under the original project, with over 4,000 certified in procurement, environmental and social standards.
Siddique said the additional funding would focus on strengthening the capacity of federal, state and local government agencies to improve development outcomes and service delivery, stressing that sustainability remained central to ensuring continuity beyond donor support.
For her part, Prof. Folasade Ogunsola, Vice-Chancellor, University of Lagos, reaffirmed the institution’s commitment to advancing professional capacity development under the SPESSE framework through postgraduate training, institutional ownership and international collaborations.
News
Kaspersky Challenges IT Leaders with Next-generation Cyber Protection Simulations

Kaspersky has expanded its Kaspersky Interactive Protection Simulation (KIPS) with new advanced cyberattack scenarios tailored specifically for IT organisations.

The update introduces realistic simulations of deepfake-enabled fraud, supply chain compromise, trusted relationship attacks and destructive wiper malware, helping businesses test their preparedness against today’s complex threat landscape.
IT companies remain one of the most attractive targets for cybercriminals. As attackers increasingly combine social engineering, supply chain manipulation and ransomware tactics, organisations require hands-on, strategic training that reflects real-world attack dynamics.
Kaspersky Interactive Protection Simulation is designed to bridge the communication gap between CISOs, IT teams and top management. By immersing participants in realistic cyber crisis scenarios, KIPS demonstrates the operational and business impact of attacks in an accessible, engaging format.
Real-world attacks in a realistic simulation environment
The updated IT-focused scenario in KIPS exposes participants to modern attack techniques observed by Kaspersky experts in active malicious campaigns targeting the IT sector.
Participants may face:
Binary Backdoor in the Build – a supply chain attack that compromises software during signing, packaging or distribution stages. Once deployed, the tampered product enables data theft, persistent remote access and the compromise of trusted customers downstream.
DeepFake Boss – a social engineering campaign leveraging AI-generated video and voice impersonations of corporate executives to manipulate finance teams into initiating unauthorised payments.
Trusted Relationship Attack (VPN) – exploitation of third-party access and remote connectivity tools to infiltrate corporate environments through contractors or service providers.
Wiper Attack (Babuk) – a destructive malware scenario based on leaked Babuk ransomware code. This scenario tests resilience against irreversible data corruption combined with ransomware deployment. In the simulation, if players fail to contain the attack in time, data becomes encrypted, forcing a complete rebuild from scratch.
IT companies can now choose between two dedicated attack scenarios, testing coordination, crisis management and decision-making under pressure. KIPS is available in both live (up to 100 participants) and online (up to 1,000 trainees) formats and provides detailed analytics on participants’ decisions, team coordination and benchmarking against previous sessions.
“To stay secure, organisations need a layered defence strategy that combines technology, processes and people. But investing in tools alone is not enough. Cyber resilience depends on awareness, coordination and the ability to respond effectively under pressure,” comments Svetlana Kalashnikova, Security Awareness expert at Kaspersky.
“Kaspersky Interactive Protection Simulation, a part of a comprehensive Security Awareness offering, helps organisations experience real-world attack scenarios in a controlled environment, strengthening decision-making, cross-team collaboration and executive understanding of cybersecurity risks. By transforming complex threats into practical learning experiences, we empower companies to build stronger, more resilient security cultures.”
News
National Assembly to Review National Data Protection Act

Sen. Afolabi Salisu, the Chairman, Senate Committee on ICT and Cyber Security, has said efforts were ongoing to review the National Data Protection Act (2023) to meet emerging threats associated with technological advancement.

Salisu disclosed this on Tuesday at the opening of a three-day workshop, on Data Protection Awareness Promotion organised for the Joint National Assembly Committee on ICT by Nigeria Data Protection Commission (NDPC) and Ampersand Development Partners.
He said that since the enactment of the Act in 2023, there have been new developments such as Artificial Intelligence (AI) and the United Nations Convention on Cyber Crimes.
The lawmaker said that there is a nexus between data governance and cyber crimes hence the need to look at the Act and strengthen the handshakes where necessary.
According to him, we need to ensure the security of our country, particularly in the cyber space and our data governance as well as technology advancement like AI.
“As legislators, we need to have knowledge on data privacy and protection for us to be able to effectively legislate in that area.
“You cannot legislate in an area that you are not sufficiently knowledgeable in; this workshop affords us the opportunity to build our capacity to understand modern principles of data protection and to be in position to review the National Data Protection Act
“It has been three years down the line, how has this law addressed the need of the nation, particularly given the emerging technologies and how it compares with other other countries.
“At the end of this exercise, we would be able to come up with a roadmap, a timeline, with a view to review the National Data Protection Act,” he said.
The lawmaker tasked all Nigerians on private data protection saying that it is the duty of all citizens to ensure safety of their data.
He said that many free public WiFi and Apps are not always free as users pay with their data and adverts without knowing it.
Also speaking, the Chairman, House Committee on ICT and Cyber Security, Rep. Stanley Olajide (APC- Oyo) said that data is gold and Nigeria’s next prosperity was not going to be oil but data.
He said that no investor would bring foreign funds or capital into Nigeria, without making sure that the right data protection law is in place, which Nigeria has.
“Whatever data that we have is our sovereign wealth, is something that belongs to us. How do we protect it? We have to make sure that the right legal frameworks are put in place, so that those data, once bridged, you can actually hold entities, corporation, the countries responsible when they’ breach your data law.
“In the U.S., they have their data law; if you put anything in their cloud, is owned by the United States. So we also have to have something here.
“Anything that resides here in Nigeria and is generated here must be home and protected by our country; so we are put in the right laws and framework in place just to do that,” he said.
Telecom2 days agoMTN, Airtel, Glo Under Pressure as FG Demands Better Service Delivery
E-Financial2 days agoMastercard, BMONI Launch Multi-Currency Payment Cards in Nigeria
E-Business2 days agoFirm Warns of Phishing Attacks via Compromised Amazon Simple Email Service Accounts
General News1 day agoPalmPay, LASUBEB Deepen Efforts to Keep More Children in School
News2 days agoDr. Olusola Teniola, Honoured with Yoruba Study Group Golden Leadership Excellence Award
General News2 days agoMoniepoint Partners GDG Lagos, Women Techmakers to Empower the Next Generation of Women Architects in Tech
Broadcasting2 days agoMetro Digital, Nigerian Firm Accuses Multichoice Of Refusal to Obey Court Judgements
General News2 days agoGoogle Disrupts AI-Driven Cyberattack, Warns of Emerging Security Risks


















