In observing World Mental Health Day on the 10th of October, Kaspersky warns of the relationship between digital fatigue and increased exposure to cyber risks.

In today’s data-driven and digital business environment, office employees are bombarded with a constant feed of notifications, continuous digital interactions and the need to make huge amounts of decisions throughout the day.

Even though advanced technologies like artificial intelligence (AI) and machine learning are helping to improve efficiencies, workers are under significant strain.

This can result in digital fatigue that not only negatively impacts an employee’s well-being and productivity versus higher rates of burnout, but also risks opening the company to a range of cyberthreats, from phishing to deepfakes, warns Kaspersky.

“Employees face hundreds of decisions daily, that range from small, routine choices to critical business decisions. Eventually, the brain’s ability to make sound judgments declines over time and pressure. The constant influx of emails, messages, and alerts are exacerbating this digital fatigue,” says Brandon Muller, Technical Expert for the MEA region at Kaspersky.

In fact, a research by Forbes Advisor shows that digital communications make 58% of employees feel like they need to be available more often.

This results in 60% of the workforce feeling increased burnout. The constant need to stay online and multitask adds to this high-pressure environment, making employees more prone to mistakes.

Phishing still prevalent

Phishing remains one of the most widespread forms of cybercrime. Fatigued employees are more likely to miss the warning signs of a phishing email, especially when they are just one among many in their overflowing inboxes and as phishing campaigns become ever more sophisticated.

These attacks are designed to deceive employees into disclosing sensitive information, such as login credentials or financial data, by posing as legitimate sources.

While phishing attacks come in various forms, they often target corporate email systems due to the potential wealth of valuable information they hold, making them prime targets for exploitation.

The rising threat of deepfakes

AI is also contributing to the rise of deepfakes – highly convincing audio or video content manipulated to deceive the recipient. Even when not fatigued, employees are finding it more difficult to assess the authenticity of such content.

When it comes to digital fatigue, these deepfakes can pose a serious risk in corporate settings, where cybercriminals may impersonate executives to authorise fraudulent transactions or gain access to sensitive information.

Other threats

From inadvertent installation of malware to checking the contents of a USB found on a way to the office – the cyber risks may vary in form and can lead to devastating consequences. If robust cybersecurity solutions are in place to help identify and filter the threats, and if employees are educated and alert, organisations are in a much safer position.

Supporting employees

There are several proactive measures organisations can adopt to help reduce the cognitive load on their employees:

• Cybersecurity training that is relatable and engaging: By using automated, customised training platforms that adjust content based on role and experience, organisations can make sure their employees stay informed without feeling overwhelmed. Gamified elements in training can also enhance engagement and retention.
• Automated cybersecurity solutions: Investing in advanced cybersecurity tools, such as automated threat detection and response systems, help businesses reduce human error and mitigate risks.

Protection solutions for mail servers with anti-phishing, anti-spam, and malware detection technologies decrease the chance of infection. These tools can work in the background, allowing employees to focus on their work without constantly worrying about potential cyber threats.

• Enable a Default Deny policy for critical user profiles, particularly those in financial departments, which ensures that only legitimate web resources can be accessed.
• Create areas for employees to take a break.

Advice for employees to combat digital fatigue:

• Establish routines for certain decisions to save mental energy for more critical choices.
• Prioritise tasks, delegate or automate less important decisions.
• Identify most important criteria to ease decision making, narrow down your choices, ask for advice and additional information.
• Focus on key data, limit information overload and distractions when taking important decisions.
• Recognise the signs of decision fatigue, such as reduced concentration, increased irritability, and procrastination.
• Schedule regular breaks to recharge and prioritise some exercise such as going for a walk. Also consider exercises for your eyes and neck.
• Stay alert when receiving messages that look uncommon, as well as when visiting new web pages and making money transactions.

“The demands of the digital workplace are not going away. Fortunately, organisations can take meaningful steps to support their employees while still protecting the business from cyber threats. By addressing the root causes of decision and digital fatigue, companies can reduce the risk of successful phishing, deepfakes, and other sophisticated cyberattacks,” concludes Muller.

Kaspersky has uncovered cybercriminals exploiting the hype surrounding “Joker: Folie à Deux” ahead of its worldwide cinema premiere, for online phishing scams. Fans eager to watch the new movie online are at risk of being duped into giving away their sensitive data and money.

Kaspersky experts have identified phishing scams related to the new movie. The first example involves a fake offer to subscribe to watch the film for free.

On the fake website, users are asked to enter their credit card information to sign up, while the promised film is never accessible. The scammers gain access to the victim’s card details and can use them for fraudulent transactions or to sell on the dark web.

The second type of scam exploits the Joker movie brand to lure victims into fraudulent investment schemes, giveaways, or similar traps. Cybercriminals create phishing websites claiming to offer free access to the movie.

When users attempt to play the video, they are redirected to other pages – often promoting quick, easy money-making schemes, offering the chance to participate in a giveaway, or possibly other profits.

In the cases uncovered by Kaspersky, users are prompted to provide either personal information – so perpetrators can contact them with faux investment opportunities – or credit card details, for example, to pay for the delivery of the giveaway prize.

“As the premiere approaches, more people are looking for more ways to gain early access to the film and, as such, the risk of falling for such scams increases. We strongly recommend users carefully verify where they enter sensitive information and install reliable antivirus software that can warn against suspicious or malicious websites,” says Olga Svistunova, a security expert at Kaspersky.

To protect themselves from phishing-related risks, Joker movie fans should take precautions when navigating online content related to the premiere. Kaspersky experts recommend the following:

Be cautious. Beware of suspicious emails, messages, or websites offering exclusive deals or freebies. Always verify the source before sharing personal or financial information.

Safeguard personal data. Be mindful when providing sensitive information online, such as your address, phone number, or financial details, and only use secure platforms.

Verify website security. Ensure websites have secure connections by looking for “https://” in the URL and a padlock symbol in the address bar.

Use security solutions. Rely on trusted security solutions like award-winning Kaspersky Premium, that identifies malicious and phishing sites.

Trust reliable sources. Stick to official websites, authorised retailers, and reputable sources for any content to avoid scams.

Dr. Vincent Olatunji, CEO/ National Commissioner of Nigeria Data Protection Commission has approved the extension of deadline for the registration of Data Controllers and Data Processors of Major Importance (DCPMIs).

The commission in a statement issued on Friday by Babatunde Bamigboye, Head, Legal, Enforcement & Regulations, said that the new deadline for registration without penalty is the 31st of October, 2024.

The statement reads, “In order to ensure accountability and in line with sections 24(3), 29(1)(a) and 44 of the Nigeria Data Protection Act, 2024 (NDP Act), DCPMIs shall only engage agents and contractors who are duly registered with the Commission (as at 15th October, 2024) for the processing of personal data”.

For ease of reference, section 29(1)(a) of the NDP Act provides: “Where a data controller engages the services of a data processor, or a data processor engages the services of another data processor, the data controller or data processor engaging another shall ensure that the engaged data processor —

(a) complies with the principles and obligations set out in this Act as applicable to the data controller;

“Furthermore, Section 65 of the NDP Act defines a data processor “as an individual, private entity, public authority, or any other body, who processes personal data on behalf of or at the direction of a data controller or another data processor.”

The Commission enjoins data controllers and data processors of major importance to immediately ensure that those who process personal data on their behalf fulfill the obligation to register as required by law. Engaging an agent or contractor who does not comply with the principles and obligations (set out in the NDP Act) that are applicable to the data controller is a contravention of the NDP Act.