Connect with us

Broadcasting

Deepfakes: The Next Human Vulnerability for Businesses?

Published

on

Kindly share this post

By Ben Jacob, Tech Lead EMEA, Sophos Red Team at Sophos

Synthetic audio and video generation technologies, known as deepfakes, have reached a critical threshold. Once mostly limited to social media entertainment or occasional political manipulation, they are now fully integrated tools in cyberattack tactics. This shift represents more than a technological evolution; it marks a transformation where human perception itself has become an attack surface. Recognizing a familiar voice or face is no longer a guarantee of authenticity.

In this context, businesses face a threat that relies less on raw technical skill and more on subtle manipulation of human behavior. Fraud campaigns now exploit cloned voices and manipulated videos to simulate authentic communications, deceiving even the most vigilant employees. In February 2024, an employee at a Hong Kong multinational transferred €24 million after being duped by a deepfake. The scam succeeded because everything appeared authentic: accent, rhythm, tone… The widespread availability of these tools, thanks to their low cost and accessibility, accelerates the industrialization of such attacks.

A technological threat turned human

Attack simulations conducted with international organizations show that deepfakes are no longer a futuristic hypothesis but an established reality. A 2024 Anozr Way report projected deepfakes could increase from 500,000 in 2023 to 8 million in 2025. Deepfakes exploit a rarely anticipated cybersecurity vulnerability: our instinctive trust in human interactions. Cloned voices impersonate executives; videos generated from public content are embedded in credible scenarios to deceive experienced staff. Beyond technical sophistication, the industrialization of these practices is what should raise alarm.

Voice cloning now requires only a few seconds of publicly available audio, often available via public media such as YouTube or TikTok, allows artificial voices to be generated within minutes at low cost. These voices are then used in automated campaigns, including mass phone calls conducted by conversational agents simulating convincing human interaction. This paradigm shift moves the attack vector from IT systems to human behavior, exploiting trust, urgency, and voice recognition.

Identity: the new attack surface

Across recent breaches, including those impacting M&S and JLR, we are witnessing a clear shift in attacker behavior. Adversaries no longer “hack in”, they simply “log in”. They obtain valid credentials through phishing, vishing, and social engineering campaigns, then use them to operate under the radar of traditional defenses. Deepfakes now extend this pattern by enabling the theft and imitation of identity itself. A cloned voice or AI-generated face can bypass skepticism, convincing employees they are interacting with a trusted colleague or executive.

Identity has become the primary currency of access. As organizations strengthen their technical controls, attackers increasingly exploit human trust as the easiest route inside. This convergence of social engineering and AI-driven impersonation means the next wave of attacks won’t just target vulnerabilities in IT systems, they’ll target people.

Awareness, doubt, and verification: the new pillars of cybersecurity

Most companies have focused cybersecurity efforts on protecting systems and data. However, with deepfakes, humans become the entry point. These attacks exploit a major gap in current cybersecurity: the lack of verification reflexes in voice and video communications. While most organizations run phishing awareness campaigns via email, awareness of deepfakes remains minimal. Unlike phishing, now well understood, falsified calls or video conferences remain largely underestimated. The realism of deepfakes, especially under stress or urgency, obscures subtle cues that could raise alarms.

Detection depends on noticing small inconsistencies such as timing delays or slightly robotic speech, signs that are easy to miss during a busy day. Organizations need to establish verification practices that go beyond technical controls. This includes contextual questions that only legitimate colleagues would know, answers that change regularly (e.g., “When did we last meet?”), or confirmation through secondary channels. “Trust but verify” has long been a motto in cybersecurity, but identity-based attacks such as deepfakes make it more relevant than ever.

“Robocalls,” already widely used to target individuals with daily AI-driven calls, can also be exploited by adversaries for illegitimate purposes. Here too, slight timing delays and intonation are key indicators to identify.

Therefore, team awareness can no longer be limited to email. It must include these new scenarios, train employees to recognize manipulations, and foster a culture of systematic verification. Trust must no longer be implicit, even when it seems natural.

The threat of deepfakes can no longer be seen as a technological curiosity or niche risk. It fundamentally challenges how companies manage trust, decision traceability, and communication security. Organizations must integrate these concerns into governance: crisis simulations, verification protocols, redundant information channels, and continuous training. More than a technological response, this requires an organizational, cognitive, and cultural approach. Against a digital illusion that relies on familiarity, only active vigilance can prevent the next attack from coming… through the CEO’s voice.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Broadcasting

NELFUND Investigates 34 Universities Over Students’ Missing Tuition Refunds

Published

on

Kindly share this post

Nigerian Education Loan Fund (NELFUND) says it is investigating about 34 tertiary institutions over allegations that they failed to refund students whose tuition fees were paid twice under the Federal Government’s student loan scheme.

The Managing Director of NELFUND, Mr Akintunde Sawyerr, disclosed this during an interview on Arise Television.

Sawyerr said the agency had deployed a five-member investigative team, including operatives of the Economic and Financial Crimes Commission (EFCC) and internal auditors, to examine the allegations.

According to him, the investigation was prompted by numerous complaints received from affected students.

“As of right now, there are 34 institutions that we are looking at closely with respect to this issue,” he said.

Sawyerr explained that the double payment issue arose because President Bola Tinubu directed that the student loan scheme commence in the middle of an academic session instead of at the beginning.

He said the decision compelled many students to pay their tuition fees to meet registration deadlines while awaiting approval of their loan applications.

“What happened is that a lot of schools got double payment; some from the students and some from us,” he said.

“The refund process is entirely out of our hands. It is the recipient of the double payments that is obliged to make refunds to the students.”

The NELFUND boss noted that many students had borrowed money from family members, friends and other sources to pay their tuition with the expectation of receiving refunds once the loans were disbursed.

He said while some institutions had promptly refunded affected students, others had failed to do so.

“Some have been very good at this. Others haven’t been so good at it,” Sawyerr said.

“I reserve judgement on the intentionality around it because, for some of them, they just didn’t have the process to make refunds.”

Sawyerr disclosed that NELFUND was exploring a tokenised payment system that would enable students to authorise tuition payments directly to their institutions, thereby reducing the likelihood of duplicate payments.

He said the agency deliberately chose not to disburse tuition loans directly to students to minimise the risk of fund diversion.

“Paying the funds to the students could really lead to the temptation for them to divert and do other things,” he said.

The managing director, however, acknowledged that NELFUND lacked the statutory powers to compel institutions to refund students or prosecute officials found culpable.

He added that many frustrated students had submitted complaints not only to NELFUND but also to anti-corruption agencies, including the EFCC and the Independent Corrupt Practices and Other Related Offences Commission (ICPC).

Sawyerr also expressed concern over increases in tuition fees by some institutions following the introduction of the student loan scheme.

He said NELFUND had declined to pay institutions that increased their tuition fees beyond acceptable levels.

“Some schools, because they get paid easily, started to put up their fees. We refused, point blank, to pay institutions who had hiked their fees beyond a certain level,” he said.

He reaffirmed the agency’s commitment to investigating every reported irregularity and strengthening the implementation of the student loan programme through continuous monitoring and internal reviews.


Kindly share this post
Continue Reading

Broadcasting

Obi, NDC Presidential Candidate Faces N50Bn Defamation Claim over Alleged Podcast Remark

Published

on

Kindly share this post

Abayomi Arabambi, national vice chairman (South-West) of the Labour Party, has demanded a public apology, a retraction, and N50 billion in damages from Peter Obi, presidential candidate of the Nigeria Democratic Congress (NDC), over an alleged defamatory statement made during a podcast interview.

Obi, NDC Presidential Candidate Faces N50Bn Defamation Claim over Alleged Podcast Remark

The demand was contained in a letter issued by the law firm Neplus Ultra Attorneys and signed by Anderson U. Asemota, Peter O. Asimegbe, and Stanley C. Eziefulle on behalf of Arabambi.

According to the letter, the legal dispute arose from comments allegedly made by Obi during the interview, where he reportedly stated that Arabambi “does not have an address.”

Arabambi’s legal team described the statement as false, malicious, and defamatory, arguing that it portrayed their client as a faceless individual without legitimacy, credibility, or standing in public life.

The lawyers further claimed that the interview was widely circulated on television stations and digital platforms, exposing Arabambi to public ridicule and damaging his reputation.

“Our client has had a known residential and business address, maintains professional and political affiliations within Nigeria, and has never been a person whose whereabouts or identity were unknown,” the letter stated.

The legal team maintained that the alleged publication caused embarrassment and harmed Arabambi’s public image and political standing.

As part of their demands, the lawyers called for an unreserved public apology to be aired on national television, published on Obi’s verified social media platforms, and carried as full-page apologies in national newspapers.

They also demanded the payment of N50 billion as compensation for the alleged injury to Arabambi’s reputation, dignity, political standing, and public image.

 


Kindly share this post
Continue Reading

Broadcasting

Why We’re Partnering With NIHOTOUR To Bring Nigerians In South Africa Home – Steve Babaeko

Published

on

Kindly share this post

When Nigerians began arriving back home on emergency flights following an ultimatum from anti-migrant groups in South Africa, Steve Babaeko, alongside The Nigerian Institute of Hospitality and Tourism (NIHOTOUR), saw an opportunity to step up for his fellow citizens.

Why We’re Partnering With NIHOTOUR To Bring Nigerians In South Africa Home - Steve Babaeko

Steve Babaeko

The CEO of X3M Ideas explains that he saw a deep obligation, one that had nothing to do with advertising and everything to do with hospitality. For Babaeko, it was a reminder that an agency owes a duty of care to the community it exists within.

That conviction shaped the creative agency’s partnership with the Nigerian Institute of Hospitality and Tourism (NIHOTOUR) for the newly launched ‘Welcome Home’ pilot programme at Murtala Muhammed International Airport (MMIA) in Lagos. Rather than simply crafting a messaging campaign around the crisis, X3M Ideas helped design a tangible, physical system.

“This wasn’t built as a campaign about a crisis,” Babaeko said. “It was a hospitality agency deciding what it owes its own citizens the moment they land.”

For Babaeko, what X3M has built is infrastructure, something returnees can physically walk through, use, and benefit from the instant they clear the arrival gate.

With the MMIA pilot now officially running, NIHOTOUR directs returnees to immediate support services and issues them a Returnee Card. This card grants individuals a free first night at partner hotels, immediate transport assistance from the airport, and fast-tracked business registration support.

Furthermore, the initiative features a dedicated Restart Desk to assist returnee entrepreneurs and tradespeople with job placement referrals and business registration. This operates alongside a public Homecoming counter that tracks the cumulative number of returnees welcomed, businesses restarted, and jobs facilitated.


Kindly share this post
Continue Reading

Trending