E-Business
In Absence of Rules, Cyber Terrorists Attack Nations
The systematic crash of the computer systems of banks and TV broadcasters in South Korea — reportedly the result of an attack that was widely speculated to have been launched by North Korea — raises questions about what international laws, if any, govern the new and unexplored area of cyberwarfare.
“The answer is there’s nothing and there’s everything,” said Michael Schmitt, professor and chairman of the international law department at the U.S. Naval War College.
Schmitt, who was asked by the NATO Co-operative Cyber Defence Centre of Excellence to look into these issues, chaired a three-year project that brought together 20 academics and practitioners from around the world.
CBC, the leading Canadian media reported that the culmination of their efforts was the recently published Tallinn Manual on the International Law Applicable to Cyber Warfare.
“If you’re looking for cyber specific law, a law that says ‘a cyberattack that causes these consequences in an armed attack to which you can respond,’ you will find nothing,” he said. “But it was our unanimous consensus among the group of experts that the existing international law applies to cyberspace and to cyberweapons.”
This means that, as international law permits a country to defend itself and retaliate if attacked by conventional weapons, a country that is the victim of a cyberattack that causes damage or death, may also retaliate, either through cyberwarfare or conventional weapons.
“Hack into a control system of a dam and release waters downstream. Those waters are going to cause significant damage, physical damage, people will drown. In my mind that’s clearly an armed attack,” Schmitt said.
“And if someone did that to Canada, you could resort to force, not only cyber but armed force to defend yourself.”
Other examples of cyberwarfare that are grounds for retaliation by force could include hacking into a water treatment plant and causing chemicals to flow into the water, thereby poisoning the population, hacking into air traffic control systems and causing planes to crash, or hacking into a hospital and changing people’s blood type, causing harm to patients
But the attack on South Korea, if in fact North Korea was responsible, is different, Schmitt said.
The attack is certainly a violation of South Korea’s sovereignty and a violation of international law, he said, but not grounds for the use of force in response.
“We would call that a below the threshold operation that certainly would permit a response from South Korea but the response could not include armed force,” Schmitt said.
The retaliatory options for South Korea would include countermeasures. These are actions that can be taken by the aggrieved state that would normally be unlawful under international law but are considered acceptable because the aggressor state violated international law first.
“If state A attacks state B’s banking system, state B may then respond proportionally against state A’s banking system to compel state A to knock it off,” Schmitt said.
His group also looked at issues surrounding cyberattacks on civilians. Under international law and the principle of distinction, when on the battlefield, operations may only be directed against military objects and combatants and not civilians.
“We asked the question ‘when is a cyber operation a forbidden attack?’ There are all sorts of things you can do in cyberspace against civilians during an armed conflict that doesn’t physically harm them and doesn’t injure them,” he said. For example, erasing personal data or messing with their banking records.
“What we said is that this is a very hard question. Not unanimous, but the majority said that an attack, in the law of war, means you physically harm someone, you break something, you cause physical damage or you interfere in the functionality of an object such that it needs to be actually repaired.”
Ashley Deeks, an associate professor at the University of Virginia School of Law and an expert in international law, said many of the scenarios are case by case.
“Even in the kinetic world, there is no real definition of what an armed attack is,” she said, adding that states look to past practices.
For example, the Stuxnet computer virus, reportedly launched by the U.S. that attacked and destroyed hundreds of centrifuges at the Natanz uranium enrichment facility in Iran, raised these issues.
“I guess I would just characterize it as the closest thing we’ve seen to a cyber action that produces real world effects, not dissimilar from what a kinetic attack would do. But I’m not prepared to say it was an armed attack.”
That’s why a lot of people are starting to devote a lot of attention to cyberwarfare and trying to sort out where the lines are, Deeks said.
“There are a lot of question marks. If you took out a banking system, and it caused massive instability in the country … that could be construed as an armed attack by some states. But it’s really an open question,” she said.
“There would be other states that say, ‘No, unless people die, things blow up, not an armed attack. We want to set a high threshold.’ Others say, ‘That ‘s crazy. You want to start deterring these things. You want to call lower level things armed attacks.”
However, Schmitt said he believes all these thresholds will evolve over the next decade.
“I anticipate that we’ll see a lot of thresholds coming down that will allow states to respond more vibrantly to cyber attacks that might not be possible under the law as we found it.”
In a new report, Kaspersky identified over 7 million compromised accounts belonging to streaming services like Netflix, Disney+, Amazon Prime Video and others. For millions of Gen Z users, these streaming platforms play a central role in how this generation socialises and connects with global culture.
To raise their awareness and build digital resilience, Kaspersky has launched “Case 404” — an interactive cyber-detective game that helps Gen Z recognise hidden dangers and learn how to protect their digital lives.
Streaming platforms have become digital sanctuaries for Gen Z. According to recent studies, Gen Z not only spends more on streaming platforms than any other generation but also actively participates in online fandoms, sharing clips, memes and fan theories across social media: episodes become memes, quotes turn into tweets, and characters live on through edits, debates, and TikTok trends.
Yet this always-online, highly engaged behaviour comes with hidden risks. The very devices Gen Z uses to stream their favourite shows can become entry points for cybercriminals through malware infections. These threats often hide in unofficial downloads, pirated content, browser extensions, or compromised apps, silently collecting login credentials, session data, and other personal information.
Kaspersky Digital Footprint Intelligence team analysed compromised credentials linked to the major streaming services (Netflix, Disney+, Amazon Prime Video, Apple TV+ and Max) and uncovered 7,035,236 cases in 2024. These weren’t stolen directly from the platforms themselves but were collected as part of broader credential theft campaigns.
Netflix: A major target for cybercriminals
It’s no surprise that Netflix is the defining streaming brand for Gen Z. Netflix leads both in popularity and in exposure, with 5,632,694 compromised accounts detected. Brazil had the highest number of exposed Netflix credentials in 2024, followed by Mexico and India.
Disney+
Kaspersky experts detected 680,850 Disney+ accounts in leaked datasets. Again, Brazil stood out as the country with the most breached accounts, followed by Mexico and Germany.
Amazon Prime Video
Amazon Prime Video, though smaller in volume with 1,607 compromised accounts, still plays a significant role, especially among Gen Z viewers looking for more subversive or edgy narratives. In 2024, Mexico, Brazil, and France were the top countries with leaked Prime Video accounts.
Once a device is infected, cybercriminals don’t stop at the streaming app. Malware collects sensitive data — account credentials, cookies, bank card details — which are then sold or leaked on underground forums. Sometimes, attackers give this data away just to build their reputation.
These forums are active, fast-moving, and accessible to a wide range of malicious actors. What begins as a compromised Netflix password can quickly snowball into broader digital intrusion, identity theft, or financial fraud, especially if the same credentials are reused across services.
As streaming platforms, fandom culture, and social media become deeply woven into Gen Z’s everyday experience, cyberthreats are adapting to target the spaces they trust most. To respond to this shift, Kaspersky has created “Case 404” — an interactive cybersecurity game explicitly tailored for Gen Z users.
In this digital quest, players step into the role of AI-powered cyber-detectives, investigating realistic online crimes inspired by current threats. Upon completing all cases, users receive a discount on Kaspersky Premium, turning new knowledge into actionable protection.
“For Generation Z, streaming is more than entertainment; it’s a daily habit, a source of identity and community. But that emotional connection also creates a blind spot. Malware hidden in unofficial downloads or third-party tools silently steals login credentials and personal data, which are then traded or sold on cybercriminal forums.
Protecting your streaming account today means thinking beyond passwords — it means securing your devices, avoiding suspicious downloads, and being mindful of where your clicks lead you,” comments Polina Tretyak, digital footprint analyst at Kaspersky.
In a powerful stride towards an inclusive digital future, the National Information Technology Development Agency (NITDA) is spearheading a transformative drive to empower Nigerian women in the Artificial Intelligence (AI) and digital economy.
This commitment was resoundingly reiterated by NITDA’s Director General, Kashifu Inuwa CCIE, at the “Innovate Her 25” conference, the 10th National Conference and 11th Annual Meeting of Nigerian Women in Information Technology.
Speaking at the event themed “Women in AI: Unlocking Resilience, Fostering Innovation and Leadership,” Inuwa, represented by Dr. Aristotle Onumo, Director of Stakeholder Management and Partnerships, emphasised that true innovation blossoms not in isolation, but through synergistic partnerships and collective endeavor – principles deeply embedded in NITDA’s operational ethos.
Highlighting Nigeria’s Artificial Intelligence (AI) Strategy, Inuwa added that inclusivity is embedded as a core objective: “Our strategic roadmap mandates that at least 40% of our programmes directly benefit women and underserved groups. We have also developed a Gender Inclusion Strategy to guide interventions in areas such as training and infrastructure,” he explained.
Further underscoring Nigeria’s leadership in the digital space, Inuwa excitingly announced that in September 2025, NITDA will proudly host a Leadership Summit on AI. This landmark event will convene stakeholders from across the African continent, fostering a collaborative environment to forge a unified AI vision for Africa.
In alignment with the conference’s focus on empowering women in technology, the DG detailed NITDA’s diverse capacity-building initiatives spanning AI, cloud computing, and cybersecurity. “We work with partners such as the Renew Hope Initiative to train thousands of women across Nigeria’s six geopolitical zones,” he revealed, highlighting the agency’s broad reach.
NITDA stands ready to collaborate with organisations like the Nigerian Women in Information Technology (NIWIT), actively encouraging proposals for bespoke programmes that cater to specific community needs. “We focus on targeted training with measurable outcomes, rather than generic approaches,” Inuwa affirmed, emphasising a results-oriented methodology.
He further spotlighted NITDA’s “Digital Literacy for All Initiative,” which seeks to equip 70% of Nigerians with digital literacy by 2027. Through strategic partnerships with the NYSC and the integration of digital literacy into national school curricula, the agency plans to train over 30 million Nigerians — with a dedicated focus on underserved communities and public servants.
Addressing critical concerns surrounding ethical AI, Inuwa emphasised the importance of developing indigenous datasets and large language models reflective of Nigeria’s unique realities: “We are working closely with stakeholders to build local datasets that safeguard Nigerians’ digital rights and ensure ethical AI use,” he assured.
NITDA is also championing mentorship for women in technology through impactful initiatives such as Women Innovate. The agency warmly welcomes collaboration with NIWIT to design structured mentorship programmes and is open to formalising such partnerships through Memoranda of Understanding (MoUs).
“NITDA is committed to fostering inclusive economic growth through innovation. Partnership and collaboration remain the way forward,” Inuwa declared.
The session concluded with a resounding call to action, urging women-focused organisations to leverage NITDA’s open-door policy and unite in advancing digital inclusion across Nigeria. The future of Nigeria’s digital economy is inclusive, and women are at its forefront.
Amazon’s management on Wednesday said that it expects that artificial intelligence software will reduce the number of office workers at the world’s largest online retailer.
Andy Jassy, chief executive, Amazon
“We will need fewer people doing some of the jobs that are being done today and more people doing other types of jobs,” Andy Jassy, chief executive, Amazon wrote in an email to employees.
He said it was difficult to predict how the overall workforce will evolve, but in the next few years, it is expected that AI efficiency gains will lead to a reduction in the number of office workers.
According to earlier reports, Amazon employed around 1.5 million people worldwide, with approximately 350,000 office employees in various roles.
The Wall Street Journal reported that the company does not anticipate further large-scale layoffs, as seen in 2022 and 2023, in the near future.
Instead, it expects that vacant positions will not be refilled.
However, layoffs are not ruled out, according to sources familiar with the matter.
“Amazon is focusing on so-called AI agents, software capable of independently performing tasks. These agents could, for example, summarise information from the web and data sources, write software, translate languages and automate many time-consuming tasks,” Mr Jassy explained.
“Agents will be teammates that we can call on at various stages of our work,” he added, urging employees to experiment with AI whenever possible.
The impact of AI on the job market has been a concern for many years.
Recently, Spotify, the leader in music streaming, announced that teams requesting additional staff would first need to prove that AI could not perform the tasks.
The creators of the language-learning app Duolingo plan to gradually replace external workers with AI.
Lebara, New Operator Enters Nigerian Telecom Arena, Sells Minutes, Not Airtime
EFCC Drags Cititrust to Court over Unreported ₦200mTransfers
ARCON to Tackle Digital, Recommits to Ethical Standards
Africa Gears Up For Digital Sovereignty At 13th Edition Of Digital Africa Conference 2025
Over 7m Streaming Accounts’ Credentials were Leaked in 2024 – Report
E-Business23 hours agoOver 7m Streaming Accounts’ Credentials were Leaked in 2024 – Report
E-Financial23 hours agoS&P Global Ratings Downgrades Ecobank Nigeria’s Credit Rating to CCC-, Outlook Negative
Telecom2 days agoMTN Says New N6.98 USSD Charge Won’t Affect Airtime Recharge
Telecom23 hours agoPIN Pushes for Equitable Digital Governance at World Internet Forum
Telecom23 hours agoLebara, New Operator Enters Nigerian Telecom Arena, Sells Minutes, Not Airtime
- General News2 days ago
Study Reveals 7% of Industrial Organizations Tackle Vulnerabilities Only When Necessary
Telecom2 days agoNnaemeka Ani Calls on African Techies to Rewrite the Narrative
E-Financial2 days agoSofri Rejigs Digital Platforms for Better Customer Experience