Connect with us

News

Kaspersky says Phishing Diversified During COVID-19 Outbreak with 2 million Attacks in Q2 in Africa

Published

on

Kindly share this post

Kaspersky analysis has revealed that phishing attacks are becoming increasingly more targeted. A number of new tricks have also been found – from HR dismissal emails to attacks disguised as delivery notifications.

As a result of such tendencies, security solutions have detected 2,023,501 phishing attacks in South Africa, Kenya, Egypt, Nigeria, Rwanda and Ethiopia. These and other findings are documented in Kaspersky’s new spam and phishing in Q2 2020 report.

Phishing is one of the oldest and most flexible types of social engineering attacks. They are used in many ways, and for different purposes, to lure unwary users to the site and trick them into entering personal information.

The latter often includes financial credentials such as bank account passwords or payment card details, or login details for social media accounts. In the wrong hands, this opens doors to various malicious operations, such as money being stolen or corporate networks being compromised. This makes phishing a popular initial infection method.

South African users have been influenced the most by this type of threat: there were 616,666 phishing attacks detected in 3 months. It was followed by Kenya (514,361), Egypt (492,532), Nigeria (299,426), Rwanda (68,931) and Ethiopia (31,585).

Phishing is a strong attack method because it is done at such a large scale. By sending massive waves of emails under the name of legitimate institutions or promoting fake pages, malicious users increase their chances of success in their hunt for innocent people’s credentials. The first six months of 2020, however, have shown a new aspect to this well-known form of attack.

Targeted attacks: Small businesses in focus

As Kaspersky analysis has indicated, in Q2 2020, phishers increasingly performed targeted attacks, with most of their focus on small companies. To attract attention, fraudsters forged emails and websites from organisations whose products or services could be purchased by potential victims. In the process of making these fake assets, fraudsters often did not even try to make the site appear authentic.

Such targeted phishing attacks can have serious consequences. Once a fraudster has gained access to an employee’s mailbox, they can use it to carry out further attacks on the company the employee works for, the rest of its staff, or even its contractors.

Jack of all trades: New tricks for old purposes

The news agenda, following the COVID-19 outbreak, has already influenced the “excuses” fraudsters use when asking for personal information. This included disguising their communications with unsuspecting users as:

Delivery services. At the peak of the pandemic, organisations responsible for delivering letters and parcels were in a hurry to notify recipients of possible delays. These are the types of emails that fraudsters began to fake, with victims asked to open an attachment to find out the address of a warehouse where they could pick up a shipment that did not reach its destination.

Postal services. Another relatively original move used by fraudsters was a message containing a small image of a postal receipt. The scammers expected that the intrigued recipient would accept the attachment (which, although it contained ‘JPG’ in the name, was an executable archive) as the full version and decide to open it. The Noon spyware was found in mailings such as these examined by Kaspersky researchers.

Financial services. Bank phishing attacks in the second quarter were often carried out using emails offering various benefits and bonuses to customers of credit institutions due to the pandemic. Emails received by users contained a file with instructions or links to get more details. As a result, depending on the scheme, fraudsters could gain access to users’ computers, personal data, or authentication data for various services.

HR services. The weakening of the economy during the pandemic in a number of countries caused a wave of unemployment, and fraudsters did not miss this opportunity to strike. Kaspersky experts encountered various mailings that announced, for example, some amendments to the medical leave procedure, or surprised the recipient with the news about their dismissal. In some attachments, there was a Trojan-Downloader.MSOffice.SLoad.gen file. This Trojan is most often used for downloading and installing encryptors.

“When summarising the results of the first quarter, we assumed that COVID-19 would be the main topic for spammers and phishers for the past few months. And it certainly happened. While there was the rare spam mailing sent out without mentioning the pandemic, phishers adapted their old schemes to make them relevant for the current news agenda, as well as come up with new tricks,” comments Tatyana Sidorina, security expert at Kaspersky.

Kaspersky experts advise users to take the following measures to protect themselves from phishing:

– Always check online addresses in unknown or unexpected messages, whether it is the web address of the site where you are being directed, the link address in a message and even the sender’s email address, to make sure they are genuine and that the link in the message doesn’t hide another hyperlink.

–  If you are not sure that the website is genuine and secure, never enter your credentials. If you think that you may have entered your login and password on a fake page, immediately change your password and call your bank or other payment provider if you think your card details were compromised.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Students Loans’ Beneficiaries to Start Repayment 2 Years after Graduation-  NELFUND:

Published

on

Kindly share this post

Nigerian Education Loan Fund (NELFUND) has said that students in tertiary institutions and approved vocational centres would start repayment of the loan two years after graduation.

Students Loans’ Beneficiaries to Start Repayment 2 Years after Graduation-  NELFUND:

However, NELFUND management specifically stated that the repayment of the loan would commence if the students secured a job or went into business.

Mr. Akintunde Sawyerr, managing director, NELFUND, said the Act specify a moratorium of two years after graduation for the students to begin repayment of the loan.

Sawyerr said if the students start work, his employer would be expected to remit 10 percent into NELFUND dedicated account.

He added: “The loan does not have a specified repayment tenure. It makes it easy for students to apply for the loan. NELFUND would pay according to the documents provided by the institutions. We cannot put tenure on the loan; some will die, drop out, ‘Japa’ or refuse to pay. While those who went into business would pay into same account.

“It is a revolving a loan. We will not put students under pressure to get the loan and we are not going to state a tenure because it is not a commercial loan.’’

According to him, the loan is meant for students in public universities, polytechnics, colleges of education and vocational institutes, who apply via NELFUND portal and are expected to present their JAMB admission letter, NIN and BVN.

He explained that non-students would not have access to the loan and that NELFUND has put the necessary machinery in place to ensure that beneficiaries can be reached when the need arises.

His words: “We are using technology to run the new system. The process of application is online through our dedicated portal and we are limiting human contact as much as possible. Once you have a Bank Verification Number (BVN) and National Identification Number (NIN), which are parts of the requirements, we will have access to your data and all your accounts. This will also help us to know if you are qualified or not,” Sawyerr stated.

The MD disclosed that students already in institution are eligible to apply for the loan at any level of their study and must be at the beginning of each academic session.

He noted that such students would have to provide their admission and matriculation details in addition to BVN and NIN.

Sawyerr added that about 1.2 million Nigerian students in tertiary institutions and government-recognized vocational centres would be among the first batch of beneficiaries and that the figure would increase as time goes on.

The NELFUND boss disclosed that the scheme would be funded from one per cent of the total annual revenue by the Federal Inland Revenue Service (FIRS), which would amount to N194 billion if the agency meets its projection.

Sawyerr observed that the loan would be paid in two segments, the first, being the school fees, which would be paid directly to the institutions while stipend would be paid into students’ account for their day-to-day upkeep.

He added that the amount individual students would access varies because of the course of study, school fees and geographical location of the institutions.

“You don’t start paying back the loan until two years after your National Youth Service Corps (NYSC) scheme and you have secured a job or business. A beneficiary can defer repayment if he has not secured a job, but if after due diligence, he/she defaulted, then the student becomes a criminal and we will work with government agency that can help us get the money back, for example, EFCC, ICPC,” Sawyerr stated.


Kindly share this post
Continue Reading

News

GPA Raises Alarm, Says Malaria Vaccine Can Cause Meningitis

Published

on

Kindly share this post

Global Prolife Alliance (GPA), global health organization, has told the National Assembly that the intended malaria vaccine currently proposed by Bill Gates, American billionaire, for Nigeria can trigger meningitis in the populace.

GPA Raises Alarm, Says Malaria Vaccine Can Cause Meningitis

Dr. Philip Njemanze, chairman of GPA, gave the warning in a statement released to newsmen in Owerri, the Imo state capital.

Njemanze, known for being pro-health in the Catholic church, charged the national assembly not to be in a hurry to succumb to the pressure of the bill currently before the house.

He said the vaccine may trigger the deaths of millions of Nigerian children prone to cerebral meningitis, especially in the northern part of the country.

Part of the letter read “Among the side effects is a tenfold increase in cerebral meningitis. Nigeria is endemic for cerebral meningitis. A tenfold increase could cause the deaths of millions of children, especially in northern Nigeria.

“Please intervene and call for a public hearing, for an open public discussion on the pros and cons with expert opinions from both sides. This will help the Nigerian people to be better informed about granting or withholding consent for the vaccination.

“Your intervention could save millions of lives, especially in northern Nigeria, where meningitis is most endemic, particularly at this time of serious insecurity,” Njemanze warned.

 

 


Kindly share this post
Continue Reading

News

NERC Cedes Regulatory Oversight of Enugu Electricity Market to State Government Agency

Published

on

Kindly share this post

The Nigerian Electricity Regulatory Commission (NERC) has ceded the regulatory oversight of the Enugu electricity market to the Enugu Electricity Regulatory Commission (EERC), which is owned by the state government with effect from May 1, 2024.

This is the first-ever transfer of regulatory powers from the NERC to a state government electricity regulator.

“On completion of the Transfers under subsections (2) and (3), whichever occurs later in time, the Commission shall have no further regulatory responsibility whatsoever for electricity market activities carried on entirely within the State to which regulatory responsibility has been transferred and for which the Additional Successor Company has been incorporated and conferred with assets, liabilities, employees, rights and obligations,” NERC said in a statement signed by Sanusi Garba and Dafe Akpeneye.


Kindly share this post
Continue Reading

Trending