News
Kaspersky says Phishing Diversified During COVID-19 Outbreak with 2 million Attacks in Q2 in Africa
Kaspersky analysis has revealed that phishing attacks are becoming increasingly more targeted. A number of new tricks have also been found – from HR dismissal emails to attacks disguised as delivery notifications.
As a result of such tendencies, security solutions have detected 2,023,501 phishing attacks in South Africa, Kenya, Egypt, Nigeria, Rwanda and Ethiopia. These and other findings are documented in Kaspersky’s new spam and phishing in Q2 2020 report.
Phishing is one of the oldest and most flexible types of social engineering attacks. They are used in many ways, and for different purposes, to lure unwary users to the site and trick them into entering personal information.
The latter often includes financial credentials such as bank account passwords or payment card details, or login details for social media accounts. In the wrong hands, this opens doors to various malicious operations, such as money being stolen or corporate networks being compromised. This makes phishing a popular initial infection method.
South African users have been influenced the most by this type of threat: there were 616,666 phishing attacks detected in 3 months. It was followed by Kenya (514,361), Egypt (492,532), Nigeria (299,426), Rwanda (68,931) and Ethiopia (31,585).
Phishing is a strong attack method because it is done at such a large scale. By sending massive waves of emails under the name of legitimate institutions or promoting fake pages, malicious users increase their chances of success in their hunt for innocent people’s credentials. The first six months of 2020, however, have shown a new aspect to this well-known form of attack.
Targeted attacks: Small businesses in focus
As Kaspersky analysis has indicated, in Q2 2020, phishers increasingly performed targeted attacks, with most of their focus on small companies. To attract attention, fraudsters forged emails and websites from organisations whose products or services could be purchased by potential victims. In the process of making these fake assets, fraudsters often did not even try to make the site appear authentic.
Such targeted phishing attacks can have serious consequences. Once a fraudster has gained access to an employee’s mailbox, they can use it to carry out further attacks on the company the employee works for, the rest of its staff, or even its contractors.
Jack of all trades: New tricks for old purposes
The news agenda, following the COVID-19 outbreak, has already influenced the “excuses” fraudsters use when asking for personal information. This included disguising their communications with unsuspecting users as:
Delivery services. At the peak of the pandemic, organisations responsible for delivering letters and parcels were in a hurry to notify recipients of possible delays. These are the types of emails that fraudsters began to fake, with victims asked to open an attachment to find out the address of a warehouse where they could pick up a shipment that did not reach its destination.
Postal services. Another relatively original move used by fraudsters was a message containing a small image of a postal receipt. The scammers expected that the intrigued recipient would accept the attachment (which, although it contained ‘JPG’ in the name, was an executable archive) as the full version and decide to open it. The Noon spyware was found in mailings such as these examined by Kaspersky researchers.
Financial services. Bank phishing attacks in the second quarter were often carried out using emails offering various benefits and bonuses to customers of credit institutions due to the pandemic. Emails received by users contained a file with instructions or links to get more details. As a result, depending on the scheme, fraudsters could gain access to users’ computers, personal data, or authentication data for various services.
HR services. The weakening of the economy during the pandemic in a number of countries caused a wave of unemployment, and fraudsters did not miss this opportunity to strike. Kaspersky experts encountered various mailings that announced, for example, some amendments to the medical leave procedure, or surprised the recipient with the news about their dismissal. In some attachments, there was a Trojan-Downloader.MSOffice.SLoad.gen file. This Trojan is most often used for downloading and installing encryptors.
“When summarising the results of the first quarter, we assumed that COVID-19 would be the main topic for spammers and phishers for the past few months. And it certainly happened. While there was the rare spam mailing sent out without mentioning the pandemic, phishers adapted their old schemes to make them relevant for the current news agenda, as well as come up with new tricks,” comments Tatyana Sidorina, security expert at Kaspersky.
Kaspersky experts advise users to take the following measures to protect themselves from phishing:
– Always check online addresses in unknown or unexpected messages, whether it is the web address of the site where you are being directed, the link address in a message and even the sender’s email address, to make sure they are genuine and that the link in the message doesn’t hide another hyperlink.
– If you are not sure that the website is genuine and secure, never enter your credentials. If you think that you may have entered your login and password on a fake page, immediately change your password and call your bank or other payment provider if you think your card details were compromised.
Google and UpSkill Universe, Sub-Saharan Africa’s leading AI and business skills training partner, have announced a major redesign of the Google Hustle Academy programme.
For the first time, the free training initiative is open to everyone, not just business owners. The new curriculum is focused on equipping individuals and entrepreneurs with practical AI skills.
Small businesses are the engine of Africa’s economy, creating over 80% of jobs on the continent. To help them grow, the Hustle Academy was launched in 2022, providing bootcamp-style training on business strategy, digital skills, AI, and leadership. The program has since trained over 18,000 SMEs, with many reporting increased revenue and job creation.
Now, as AI reshapes the job market, the program is evolving. The 2026 edition is built for anyone in Sub-Saharan Africa, including employees, students, and jobseekers, who wants to use AI to advance their career.
To meet the needs of a diverse audience, the new format includes short, 60-minute webinars and more immersive, high-impact bootcamps. These sessions are laser-focused on putting AI to work immediately in areas like digital commerce, marketing, and growth strategy.
Speaking about the academy, Gori Yahaya, Founder & CEO UpSkill Universe said “The 2026 Hustle Academy is designed to close the AI Skills gap with hands-on training that is short, focused, and immediately useful. AI is reshaping how businesses win and how careers are built, right across this continent.
“We’re excited to renew our partnership, now in its fifth year with Google, combining their global AI leadership with our deep regional AI expertise. The next wave of AI leaders will come from this continent. We are making sure they are ready.”
The Hustle Academy initiative has strengthened digital competitiveness across emerging African economies by enabling SMEs to move beyond AI awareness to practical implementation, positioning them for sustained growth in an increasingly AI-driven business environment.
“We believe that the future of Africa’s digital economy lies in the hands of individuals and entrepreneurs alike. Our new strategy focuses on scaling reach by training individuals in the latest AI-centered tools and techniques,” said a Google representative.
Lagos State has dragged 45 individuals and firms, including Bi-Courtney Aviation, DAAR Communications and Leaders & Company, to revenue court for tax debts running into billions of naira.
Lagos Govt
Bi-Courtney, operators of Murtala Muhammed Airport Terminal Two, faces N38.7 million claim; DAAR, behind Africa Independent Television, owes N22.4 million; ThisDay publishers Leaders & Company allegedly skip N67.1 million.
GMT Energy Resources tops corporates at N145.8 million, followed by Sheriff Deputies at N132.1 million; others like Heyden Petroleum, AA Rescue, BRT operator Primero also listed.
Individuals owe N13.5 million to N35 million each.
Attorney-General Lawal Pedro said suits followed ignored notices, aiming to enforce laws and fund infrastructure.
More defendants: IENG Nigeria, James Fisher, V Care Diagnostics, Venture Garden, Saro Africa, Barry Callebaut, Native Media, First Consulting, Eyowo Payments.
Compliant taxpayers post-notice escaped prosecution; defaulters risk penalties, interest, jail.
Pedro urged prompt filings and payments.
National Agency for Food and Drug Administration and Control (NAFDAC) has alerted Nigerians on counterfeit and unregistered Cerelac Mixed Fruits and Wheat products being sold in Lagos.
NAFDAC said Nestle Nigeria, the genuine Marketing Authorisation Holder of the product, received a complaint of suspected counterfeit purportedly manufactured by Nestlé Spain, bearing Batch Code 308002910.
It said that Nestle Nigeria reported that the complainant described that the counterfeit product emitted an odour suggestive of possible contact with fuel.
NAFDAC said that preliminary review of the product by Nestle Nigeria indicated that it had expired, in spite of the container displaying an expiry date of 10-2026, which suggested that the date coding had been tampered with (revalidated).
Nestle Cerelac Mixed Fruits and Wheat is a nutritious infant cereal, designed to be a delicious first food for infants.
NAFDAC said that its post-marketing surveillance’s directorate officers in Lagos conducted a surveillance visit to Maxland Shopping Centre, 193 Ago Palace, Okota, where the product was purchased by the complainant.
It added that the suspected counterfeit and unregistered Cerelac were found on sale at the premises and subsequently mopped up, while Nestle assisted in identifying the distinguishing features between registered and unregistered product.
According to the regulatory agency, Nestle revealed that the unregistered product used a hyphen (-) to separate the day from the year, while the registered product used a slash (/) to separate the day from the year.
“It is important to note that Nestle Nigeria is not aware of the channels through which the products are supplied into the country.
“Healthcare professionals and consumers are advised to report any suspicion of the sale of substandard and falsified regulated products to the nearest NAFDAC office, call 0800-162-3322, or send an email to [email protected],” NAFDAC said.
The agency warned that counterfeit formula often lacked essential nutrients, vitamins and minerals, leading to stunted growth or developmental issues.
It said that such formula might also contain contaminants that might lead to severe health consequences to infants or even death.
NAFDAC reiterated its commitment to safeguarding public health adding that it would continue surveillance activities to ensure the quality, safety, and efficacy of all NAFDAC-regulated products circulating in Nigeria.
It said that all zonal directors of the agency and state coordinators had been directed to carry out surveillance and mop up the revalidated product, if found within the zones and states.
The agency urged distributors, retailers, healthcare professionals, and caregivers to exercise caution and vigilance within the supply chain, to avoid the distribution, sale, and use of fake products.
PowerLabs to Scale Intelligent Energy Orchestration Across Africa with New Funding
Nigeria Demands Cloud Sovereignty to Anchor Africa’s Digital Independence
Digital Encode Sponsors PAFON 3.0 as CVO Prof. Adewale Set to Deliver Keynote on Cybersecurity and Trust
Polaris Bank Targets Youth with Financial Literacy Drive
As Nigerians Struggle to Save, Mutual Benefits Highlights Power of Structured Financial Planning
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Kuda MFB Increases Kuda for Her Business Grants to ₦10 Million
Why JustMarkets Is a Strong Choice for Gold Trading
Canal+ to Cut Jobs as Part Sweeping Restructuring
Nigeria tops global rankings for USDT, USDC ownership
E-Financial2 days agoHow Sterling Bank Is Empowering 1m Women with ₦500Bn
E-Financial2 days agoSee Key Changes in BVN Rule from May 1 by CBN
E-Financial3 days agoHow Unethical Deals Triggered CBN Takeover of Union Bank -Forensic Report
E-Financial3 days agoBVN Database hits 68.6m – NIBSS
E-Financial2 days agoPaga Group Rejigs Leadership as Oviosu, Founder Becomes Group CEO
Broadcasting3 days agoMultichoice Bleeds Customers in South Africa, Loses 580,000 Subscribers
E-Business3 days agoKaspersky Warns of Digital Medicine Risks on the Occasion of World Health Day
E-Financial2 days agoReputation: The Real Currency Powering Fintechs