Connect with us

News

DHL Replaces Microsoft as Most Imitated Brand in Phishing Attempts in Q4 2021

Published

on

Kindly share this post

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies Ltd. and a leading provider of cyber security solutions globally, has published its new Brand Phishing Report for Q4 2021.

The report highlights the brands which were most frequently imitated by criminals in their attempts to steal individuals’ personal information or payment credentials during October, November and December.

For the first time, DHL took the number one spot in Q4, replacing Microsoft as the brand most likely to be targeted by cybercriminals in phishing scams. Twenty-three percent of all brand phishing attempts were related to the global logistics and shipping company, up from just 9% in Q3, as threat actors sought to take advantage of vulnerable online consumers during the busiest retail period of the year.

Microsoft, which yet again led the rankings in Q3 by accounting for 29% of all phishing attempts, only accounted for 20% of phishing scams in Q4. FedEx also appeared in the top ten list for the first time in Q4 2021, no doubt the result of threat actors trying to target vulnerable online shoppers in the run-up to the festive season as the pandemic remained a key concern.

The Q4 report also reinforces an emerging trend from Q3, with social media seeming to solidify its position among the top three sectors imitated in phishing attempts.

While Facebook has dropped out of the top ten brands most likely to be imitated, WhatsApp has moved from 6th position to 3rd, now accounting for 11% of all phishing attempts. LinkedIn has moved from 8th position to 5th, now accounting for 8% of all phishing-related attacks.

“It’s important to remember that cybercriminals are opportunists first and foremost. In their attempts to steal peoples’ personal data or deploy malware onto a user’s machine, criminal groups will often take advantage of consumer trends by imitating popular brands,” said Omer Dembinsky, Data Research Group Manager at Check Point Software.

“This quarter, for the first time, we’ve seen global logistics company DHL top the rankings as the most likely brand to be imitated, presumably to capitalize on the soaring number of new and potentially vulnerable online shoppers during the year’s busiest retail period.

“Older users in particular, who are less likely to be as technologically savvy as younger generations, will be shopping online for the first time and might not know what to look for when it comes to things like delivery confirmation emails or tracking updates.”

Omer continued, “Q4 has also confirmed what many of us were expecting. That social media would continue to be heavily targeted by bad actors looking to take advantage of those leaning more heavily on channels like WhatsApp, Facebook and LinkedIn as a result of remote working and other fallouts from the pandemic.

Unfortunately, there’s only so much brands like DHL, Microsoft and WhatsApp – which represent the top 3 most imitated brands in Q4 – can do to combat phishing attempts. It’s all too easy for the human element to overlook things like misspelt domains, typos, incorrect dates or other suspicious details, and that’s what opens the door to further damage.  We’d urge all users to be very mindful of these details when dealing with the likes of DHL in the coming months.”

In a brand phishing attack, criminals try to imitate the official website of a well-known brand by using a similar domain name or URL and web-page design to the genuine site.

The link to the fake website can be sent to targeted individuals by email or text message, a user can be redirected during web browsing, or it may be triggered from a fraudulent mobile application. The fake website often contains a form intended to steal users’ credentials, payment details or other personal information.

Top phishing brands in Q4 2021

Below are the top brands ranked by their overall appearance in brand phishing attempts:

  1. DHL (related to 23% of all phishing attacks globally)

 

  1. Microsoft (20%)

 

  1. WhatsApp (11%)

 

  1. Google (10%)

 

  1. LinkedIn (8%)

 

  1. Amazon (4%)

 

  1. FedEx (3%)

 

  1. Roblox (3%)

 

  1. Paypal (2%)

 

  1. Apple (2%)

 

 

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Nigerian Man Sentenced in U.S. for Sextortion Scheme Leading to Death of American Student

Published

on

Kindly share this post

A 27-year-old Nigerian national, Imoleayo Samuel Aina, also known as “Alice Dave,” has been sentenced to six years in prison by a U.S. federal court for his role in a sextortion scheme that led to the death of a 20-year-old American student.

The sentence, handed down by United States District Judge Joel H. Slomsky on Oct. 28, includes 72 months in prison, five years of supervised release, and restitution of $3,250.

United States Attorney David Metcalf announced the sentencing in a press release issued Saturday, Nov. 15, following a delay caused by the recent federal government shutdown.

The case stems from a January 2023 incident in which Jack Sullivan, a sophomore at Kutztown University in Pennsylvania, received flirtatious messages from Aina via Instagram. The exchange escalated to intimate photos on Snapchat, followed by threats demanding money.

Sullivan paid approximately $2,800, but Aina refused to delete the images. Less than 24 hours later, Sullivan was struck and killed by a train near the Jenkintown SEPTA station.

Aina was arrested in Nigeria alongside co-defendant Samuel Olasunkanmi Abiodun on July 31, 2024, and extradited to the United States with assistance from Nigerian authorities and the FBI. A third Nigerian, Afeez Olatunji Adewale, remains in Nigeria pending extradition.

Aina pleaded guilty in May 2025 to multiple charges including cyberstalking, extortion, money laundering conspiracy, and wire fraud. Abiodun, 26, was sentenced to five years in prison in June after pleading guilty to related charges.

U.S. Attorney Metcalf described Aina as “the driving force behind this sextortion scheme,” adding that the Department of Justice is committed to prosecuting overseas scammers who target American citizens.

“This case is a powerful reminder of the profound harm sextortion inflicts on young people and their families,” said Wayne A. Jacobs, Special Agent in Charge of the FBI’s Philadelphia Field Office.

The case was investigated by the FBI and Abington Township Police Department, and prosecuted by Assistant U.S. Attorney Patrick Brown.

The Justice Department acknowledged the critical support of Nigeria’s Attorney General, the Federal Ministry of Justice’s International Criminal Justice Cooperation Department, and the Economic and Financial Crimes Commission in facilitating the extraditions.


Kindly share this post
Continue Reading

News

Firm Urges Organizations to Check Protection of their Websites Amid Search Engine Optimisation Attack Schemes

Published

on

Kindly share this post

Kaspersky, a global cybersecurity and digital privacy company, warns of a prominent threat to website owners, including small and medium-sized businesses: search engine optimisation (SEO) spam and hidden links embedded on legitimate websites.

SEO is the practice of improving a website’s visibility in search engine results through ethical strategies like keyword optimisation, high-quality content creation and building authoritative backlinks.

However, malicious actors are exploiting this process by injecting hidden links on reputable sites to manipulate search rankings, often linking to illicit content such as pornography or gambling, jeopardising businesses’ online presence and reputation.

The consequences for affected websites are severe, including plummeting search rankings, eroded visitor trust and potential legal liability if linked to illegal content. The attackers’ goals may be to discredit certain websites or to channel traffic to certain portals.

Attackers embed hidden links on websites by exploiting compromised administrator accounts, outdated website content management system extensions (which were initially designed to enhance the functionality and features) or server weaknesses, allowing them to directly edit the site’s HTML code or inject malicious scripts. Security solutions may categorise such websites as prohibited and block traffic to them.

Popular blogs and forums are among the targets due to their high traffic, making them valuable for boosting attacker-controlled sites. Websites with less traffic are also vulnerable, as attackers exploit weaker security to inject these links, which can go unnoticed until traffic drops or search engines issue penalties.

“Kaspersky’s categorisation engine constantly detects hidden links pointing to pornographic and gambling sites. SEO spam is a serious threat that can silently undermine a company’s digital credibility and financial stability. These hidden links not only exploit a website’s authority to boost illicit sites but can also trigger harsh penalties from search engines and security solutions, devastating businesses that rely on online visibility.

Proactive defence of the website admin panel and content management system is critical to staying ahead of these evolving attacks,” said Anna Larkina, Web Content and Privacy Analysis Expert at Kaspersky.

Kaspersky recommends regular audits of website source code for suspicious elements, using trusted tools such as Google Search Console or OpenLinkProfiler. Businesses should keep CMS platforms and plugins updated, enforce strong passwords with two-factor authentication and restrict admin panel access by IP address. Deploying web application firewalls and maintaining regular backups are also essential to prevent and recover from unauthorised changes.


Kindly share this post
Continue Reading

News

IHS Holding Chairman, Sam Darwish Credits Nigeria for Strong Q3’25 Earnings

Published

on

Kindly share this post

New York Stock Exchange listed IHS Towers, the largest independent owner, operator and developer of shared communications infrastructure in Africa and one of the largest in the world by tower count, has delivered strong third quarter earnings ahead of expectations while revisiting its full 2025 guidance upwards.

This is on the back of its strong Nigeria performance where Sam Darwish, Chairman and CEO, tells thousands of Wall Street investors and analysts on its earnings call that “the current Nigerian administration has done in our opinion a great job in stabilizing and improving the economic outlook of the country as they increase reserves and strengthened the currency, while reducing red tape for businesses among other fundamental actions. So, we are upbeat about Nigeria.”.

In Nigeria, revenue increased 10.6% year-on-year to $268.0 million, driven by organic growth during the period and supplemented by favorable movements in the Naira versus the U.S. dollar.

Across the Group, revenue for the period increased by 8.3% year-on-year to $455.1 million, despite a 3.0% inorganic revenue headwind resulting from the disposal of the Company’s Kuwait operations in December 2024. Organic revenue growth of 6.6% reflected constant currency growth of 8.7% and the benefit of foreign exchange (“FX”) resets, partially offset by a reduction in revenues linked to power indexation.

Constant currency growth was primarily driven by higher contributions from colocation, lease amendments, new sites, fiber, and escalators. This strong underlying performance was further supported by a 4.7% benefit from favorable FX movements, particularly the appreciation of the Nigerian Naira against the U.S. dollar.

Adjusted EBITDA rose by 6.3% year-on-year to $261.5 million, despite a 3.3% impact from the Kuwait disposal. The Adjusted EBITDA margin of 57.5% remained consistent with the second quarter of 2025, while net income for the period totaled $147.4 million.

Adjusted Levered Free Cash Flow (ALFCF) surged by 81.2% to $157.8 million, reflecting management actions to enhance free cash flow generation and the re-phasing of interest payments between quarters following the November 2024 bond refinancing. Cash from operations increased by 42.3% to $259.6 million.

Total capital expenditure rose 16.3% year-on-year to $77.3 million, driven by the timing of maintenance and augmentation projects. The consolidated net leverage ratio improved to 3.3x, down 0.6x from the prior year, comfortably within the Company’s target range of 3.0x to 4.0x.

Reflecting the strong year-to-date performance and favorable currency movements, the Company has raised its full-year 2025 guidance.

In Nigeria the Group’s largest operation, organic revenue increased by $12.2 million, an increase of 5.0% year-on-year, driven primarily by foreign exchange resets and escalations, which more than offset a reduction in revenues linked to diesel prices. Continued growth in revenue from Colocation, Lease Amendments and New Sites was partially offset by Churn related to the approximately 1,050 sites MTN Nigeria agreed to vacate as part of the renewed and extended contracts with MTN Nigeria, signed during the third quarter of 2024.

The increase in organic revenue was supplemented by favorable movements in foreign exchange rates used to translate the results of foreign operations, with an average Naira rate of ₦1,523 to $1.00 in the third quarter of 2025 compared to an average rate of ₦1,601 to $1.00 in the third quarter of 2024. This led to a non-core increase of $13.5 million, or 5.6% year-on-year.

 


Kindly share this post
Continue Reading

Trending