E-Business
Cybercriminals use Dropbox to Target Finance Staff for Credential Thefts
A multistep phishing scheme aimed at employees that process financial documentation was discovered by Kaspersky. The scheme begins when victims receive an email from the legitimate address of an auditing firm.
This initial interaction is intended to make the recipient less suspicious: like a preparatory step to ease into the main fraudulent activity. Then a notification from the Dropbox service follows, containing malicious links to archives where cybercriminals have uploaded phishing files designed to steal credentials.
The first step involves victims receiving emails purportedly from a legitimate auditing firm. These emails are sent from an authentic address, which has most likely been hijacked by attackers. They employ social engineering tactics to lower victims’ guard and prepare them to receive a Dropbox archive.
“The email appears legitimate from both a human standpoint and in terms of protection software. It contains a plausible cover story that an official audit company has information for the recipient, complete with a disclaimer regarding sharing confidential information.
In addition, the email contains no links or attachments and originates from an easily searchable company address, making it nearly impossible for a spam filter to detect,” explains Roman Dedenok, a security expert at Kaspersky.
The only suspicious trait in this email is that the sender uses “Dropbox Application Secured Upload”. This service doesn’t exist. Although files uploaded to Dropbox can be password-protected, nothing more can be done.
Following this email, the perpetrators send their victims an official Dropbox notification. If the recipient is already primed to respond by the initial message, there is a higher likelihood they’ll follow the link to review the document.
Clicking on the link reveals a blurred document with an authentication window on top of it. The document acts as a large button, with its entire surface being a malicious link. Upon clicking, the user will see a form requesting their corporate login and password: credentials that cybercriminals seek to steal using this multistep scheme.
These attacks are considered targeted and were observed by Kaspersky in isolated instances. The scheme is described in detail in the Kdaily post. To stay protected, it is advisable to warn employees and encourage vigilance. Here are a few pieces of advice:
Provide your staff with basic cybersecurity hygiene training. Conduct a simulated phishing attack to ensure that they know how to distinguish phishing emails.
Overall, all company employees should remember to input their work password only on sites owned by their organisation. Neither Dropbox nor external auditors can know and need your work password.
As perpetrators constantly devise more sophisticated schemes to steal corporate account data, we recommend implementing real-time protection, threat visibility, investigation and response solutions, such as Kaspersky Next product line.
China’s Huawei Technologies unveiled an AI computing system on Saturday that an industry expert said rivals Nvidia’s most advanced product, as the company aims to expand its footprint in the country’s booming AI sector.
The CloudMatrix 384 system made its public debut at the World Artificial Intelligence Conference (WAIC), a three-day event in Shanghai, attracting a large crowd to Huawei’s booth with its showcase of cutting-edge AI innovations.
The system has attracted significant interest from the global AI community since Huawei (HWT.UL) first introduced it in April. Industry analysts see it as a direct challenger to Nvidia’s GB200 NVL72, the most advanced system-level offering currently available from the U.S. chipmaker.
In an April article, Dylan Patel, founder of semiconductor research firm SemiAnalysis, stated that Huawei now possesses AI system capabilities that could surpass those of Nvidia.
Huawei staff at its WAIC booth declined to comment when asked to introduce the CloudMatrix 384 system.
A spokesperson for Huawei did not respond to questions.
Huawei has become widely regarded as China’s most promising domestic supplier of chips essential for AI development, even though the company faces U.S. export restrictions.
Nvidia CEO, Jensen Huang told Bloomberg in May that Huawei had been “moving quite fast” and named the CloudMatrix as an example.
The CloudMatrix 384 system features 384 of Huawei’s latest 910C chips and, according to SemiAnalysis, surpasses Nvidia’s GB200 NVL72 in certain performance metrics, despite the latter using 72 B200 chips.
SemiAnalysis attributes this performance advantage to Huawei’s strong system design, which offsets the lower power of individual chips by leveraging a greater number of them and incorporating system-level innovations.
Huawei describes the system as utilizing a “supernode” architecture that enables ultra-high-speed interconnectivity between chips.
In June, Zhang Pingan, CEO, Huawei Cloud confirmed that the CloudMatrix 384 was already operational on Huawei’s cloud platform.
Transcorp Hotels Plc has delivered a stellar performance in the first half of 2025, recording a 60% year-on-year surge in revenue to ₦47.57 billion, up from ₦29.72 billion in H1 2024. Gross profit climbed 71% to ₦36.21 billion, maintaining a strong 76% margin despite inflation and operational headwinds.
The hospitality giant, a subsidiary of Transnational Corporation Plc, also announced an interim dividend payout of ₦1.024 billion — offering ₦0.10 per 50 kobo ordinary share to shareholders.
In a bold move, the company unveiled Nigeria’s largest corporate venue — the 5,000-seat Transcorp Centre — staking its claim as the new leader in event hospitality. Chairman Emmanuel Nnorom described the results as proof of Transcorp Hotels’ transformative strategies and unwavering investor commitment. MD/CEO Uzo Oshogwe attributed the success to relentless execution and a resilient business model.
Transcorp Hotels, renowned for iconic assets like Transcorp Hilton Abuja and its digital platform Aura, says it isn’t just leading Nigeria’s hospitality sector — it’s redefining excellence across Africa.
Chinese “threat actors” have hacked Microsoft’s SharePoint document software servers and targeted the data of the businesses using it, the firm has said.
China state-backed Linen Typhoon and Violet Typhoon as well as China-based Storm-2603 were said to have “exploited vulnerabilities” in on-premises SharePoint servers, the kind used by firms, but not in its cloud-based service.
The US tech giant has released security updates in response and has advised all on-premises SharePoint server customers to install them.
“Investigations into other actors also using these exploits are still ongoing,” Microsoft said in a statement.
The firm said it had “high confidence” the hackers would continue to target systems which have not installed its security updates.
It added that it would update its website blog with more information as its investigation continues.
Microsoft said it had observed attacks in which hackers had sent a request to a SharePoint server “enabling the theft of the key material by threat actors”.
Charles Carmakal, chief technology officer at Mandiant Consulting firm, a division of Google Cloud, told reporter, it was “aware of several victims in several different sectors across a number of global geographies”.
Carmakal said it appeared that governments and businesses that use SharePoint on their sites were the primary target.
A number of adversaries who stole material encoded by cryptography were then able to regain ongoing access to the victims’ SharePoint data, he said.
“This was exploited in a very broad way, very opportunistically before a patch was made available. That’s why this is significant,” Carmakal said.
Carmakal said the “China-nexus actor” was deploying techniques similar to previous campaigns associated with Beijing.
Microsoft said Linen Typhoon had “focused on stealing intellectual property, primarily targeting organizations related to government, defence, strategic planning, and human rights” for 13 years.
It added that Violet Typhoon had been “dedicated to espionage”, primarily targeting former government and military staff, non-governmental organizations, think tanks, higher education, the media, the financial sector and the health sector in the US, Europe, and East Asia.
Meanwhile, Storm-2603 was “assessed with medium confidence to be a China-based threat actor”.
Edun, Finance Minister Inaugurates NDIC New Management
Court Upholds AVRS Legal Rights to Licence Audiovisual Works in Hotels
Huawei Unveils AI Computing System to Challenge Nvidia’s Flagship Product
Lawyers Drags NLS to Court for Alleged Election Fraud, Data Violation
New Tax Law Empowers NRS to Fine Offenders up to N10m
General News3 days agoFG Plans N50m STEEM Grant to Support Student Innovation in August
E-Business3 days agoTranscorp Hotels Delivers Stellar H1 Results, Declares Over ₦1Bn Dividend
E-Financial3 days agoNIBBS: Banks Close 29.4m Accounts, Dormant Accounts Hit 33.39m
E-Financial3 days agoCardoso, CBN Boss Risks Arrest over Alleged N5.2 Trillion Unremitted Funds
Telecom3 days agoMTN Media Innovation Programme Fellows Gain Insight into Nigeria’s Connectivity Backbone
General News3 days agoExperts Champion Sustainability at Lagos Green Economy Forum
Broadcasting3 days agoNDPC Hides MultiChoice Privacy Violation Details Despite FOI Request- FIJ
Telecom3 days agoDriving Digital Inclusion: Anambra’s Mobile Tech Hub Brings Free WiFi to the People