Connect with us

E-Business

Kaspersky says SIM Swap Fraud is Targeting Africa’s Financial, Online Services

Published

on

Kindly share this post

Kaspersky Lab experts at its annual Cyber Security Weekend discussed the wide spread growth of mobile payments across the globe and the many cyber risks that surround such technology, especially the recent SIM swap fraud wave which have become very common in Africa and the wider region.

A SIM swap fraud happens when someone convinces your carrier to switch your phone number over to a SIM card that a criminal possesses.

In some cases, there are carrier’s employees working together with criminals. By diverting your incoming SMS messages, scammers can easily complete the text-based two-factor authentication checks that protect your most sensitive accounts in financial services, social networks, webmail services and instant messengers.

Many African countries are suited to mobile payment methods. In fact, research notes that at the end of 2017, there were 135 live mobile money services across the Sub-Saharan African region, with 122 million active accounts.

While payment methods through mobiles offer a convenience that is hard to debate, Kaspersky Lab research shows that mobile payments and the banking system are suffering a wave of attack – mostly powered by SIM swap fraud – and people are losing their money as a result.

This type of attack is used to not only steal credentials and capture one-time passwords (OTPs) sent via an SMS, but also to cause financial damage to victims, resetting the accounts on financial services, allowing to the fraudsters access to currency accounts not only in banks but also in fintechs and credit unions.

Fraudsters are also using it as way to steal money using WhatsApp, loading the messages in a new phone, contacting the victim’s contacts asking for money, simulating an emergency situation.

“Despite financial inclusion services prospering, the flip side to this is that it opens up a world of opportunities to cybercriminals and fraudsters who are using the convenience a mobile phone offers to exploit and poke holes in a two-factor authentication processes. Frauds using SIM swap are becoming common in Africa and Middle East, affecting countries like South Africa, Turkey and UAE.

Countries like Mozambique have experienced this firsthand. The implemented solution, by banks and mobile operators in Mozambique, as a result, is something I believe we must learn from and encourage other regions to investigate and apply, among other aspects, to mobile payment methods of the future – as a way to ensure that mobile phones do not become an enemy in our pockets,” said Fabio Assolini, Senior Security Researcher of Kaspersky Lab.

The total money lost in the attacks varies by country: there are extreme cases, such as one in the United Arab Emirates, where one victim lost $ 1 million, while in South Africa one victim reported losing $ 20,000.

“In average fraudsters can steal $2,500 to $3,000 per victim, while the cost to perform the SIM swap starts with $10 to $40,” conclude Assolini.

In order to protect the growing mobile digital life and payment methods, Kaspersky Lab recommends the following key considerations: Voice and SMS methods avoided as authentication methods for payments – OTPs in mobile apps like Google Authenticator or the use of physical tokens should be used.

Biometrics – there is no better authentication than that of a physical characteristic. Voice authentication is an option that can be investigated further.

An automated ‘Your number will be deactivated’ message – to be shared upon SIM swap request. This will support the user to report the activity, if it is not legitimate, faster.

Activate 2FA on WhatsApp – in an attempt to minimize WhatsApp hijacking, activating Two-factor authentication using a six-digit PIN on your device is critical. This supports the user in having an additional layer of security on the device.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

PalmPay, Jumia Partner to Launch Integration for Shoppers in Nigeria

Published

on

Kindly share this post

PalmPay, Africa-focused fintech operating Nigeria’s most used mobile wallet, and Jumia, Africa’s e-commerce giant, today announce a strategic partnership to enhance the digital payment ecosystem on the continent, starting with payment integrations and co-marketing efforts in Nigeria.

This partnership underscores both parties’ commitment to developing the digital payment ecosystem in Nigeria and grow the use of the cashless economy.

WIth PalmPay now available as a payment method, shoppers on Jumia will now be able to pay for their purchases with the option to check out with their PalmPay wallet, ensuring a seamless user experience and transaction reliability through the direct integration.

“We are proud to partner with Jumia as we bring together the best of fintech and e-commerce to redefine the online shopping experience,” said Sofia Zab, Chief Marketing Officer, PalmPay. “This strategic alliance aligns perfectly with our shared commitment to delivering a superior user experience and exceptional value to our customers.”

Speaking on the partnership, Sunil Natraj, CEO, Jumia Nigeria added: “At Jumia, we are dedicated to creating value for our customers by ensuring a convenient, reliable, and secure shopping experience.

“This partnership with PalmPay strengthens our commitment to enhancing the digital payments within our platform. By integrating PalmPay, we are providing more options for customers to access affordable and quality goods with the convenience of cashless transactions.”

This alliance marks the beginning of a long-term collaboration between two industry giants, aiming to drive innovation, increase convenience for consumers, and foster the adoption of digital payments across Africa.

To celebrate the launch of the partnership, PalmPay and Jumia are launching a special Christmas campaign, running from December 11th to 30th. During this period, customers who make purchases on Jumia using the PalmPay payment method will stand a chance to win exciting cash rewards. More details can be found on the brands’ respective social media pages. @palmpay_ng and @JumiaNigeria.


Kindly share this post
Continue Reading

E-Business

Aero Contractors Launches “12 Days of Christmas” Campaign

Published

on

Kindly share this post

Aero Contractors is thrilled to announce the launch of its “12 Days of Christmas” campaign, a festive and engaging social media initiative designed to spread holiday cheer and reward loyal customers.

Running from December 13 to December 24, 2024, this exciting campaign underscores Aero Contractors’ commitment to connecting families, friends, and communities during the holidays.

The “12 Days of Christmas” campaign invites travel enthusiasts, loyal customers, and holiday travelers to participate in fun and interactive activities on Aero Contractors’ social media platforms, including Instagram, Facebook, and X (formerly Twitter). Each day will feature engaging posts such as trivia, puzzles, and challenges designed to ignite the festive spirit and encourage community participation.

Participants are encouraged to follow Aero Contractors’ social media pages, engage with the daily posts by liking, commenting, or sharing, and follow the specific instructions for each day’s activity.

Winners will be selected daily and announced on the respective platforms. Exciting prizes await participants, with the grand reward of a free return economy class ticket—a perfect gift for reconnecting with loved ones or exploring new destinations this holiday season.

“At Aero Contractors, we believe in the power of togetherness, especially during the holidays,” said Capt. Ado Sanusi, Managing Director of Aero Contractors.

“Our ‘12 Days of Christmas’ campaign is our way of giving back to the community that has supported us throughout the year. It’s an opportunity to engage, celebrate, and reward our customers while spreading joy and festive cheer.”

This campaign targets travel enthusiasts, loyal Aero Contractors customers, and families looking to make the most of the holiday season. Through this initiative, Aero Contractors reaffirms its dedication to safe, reliable, and efficient air travel, bringing people closer when it matters most.

Follow Aero Contractors on Instagram, Facebook, and X to join the “12 Days of Christmas” campaign. Engage daily for a chance to win a free return economy class ticket and other exciting offers.


Kindly share this post
Continue Reading

E-Business

Companies Plan to Increase IT Security Budgets by 9 Percent in the Next Two Years

Published

on

Kindly share this post

Companies are planning to increase their investments in information security against the background of growing financial losses from cyber incidents. This trend was revealed in the recent Kaspersky’s IT Security Economics report.

Kaspersky IT Security Economics is an annual report that unpicks the changes in budgets, breaches and business challenges affecting IT Security decision makers. It is based on interviews with IT and IT security professionals working in organisations of various sizes and industries.

The survey was conducted across 27 countries in Europe, the Asia-Pacific region, the Middle East, Turkiye and Africa region (including Egypt, Saudi Arabia, Pakistan, South Africa, Turkiye, the UAE), Latin and North America.

According to the research, companies plan to increase their IT security budgets by up to 9%. The median cybersecurity budgets for large enterprises were $5.7M with $41.8M allocated for IT generally, while SMBs invested $0.2M in IT security from a median IT budget of $1.6M.

Possible reasons for the increased investment can be found in the analysis of financial losses from cyber incidents. Large enterprises experienced an average of 12 incidents this year, spending $6.2M to recover from them — 1.1 times higher than the budget allocated for IT security overall.

Despite the greater resources and advanced security infrastructures, the sheer scale and complexity of large enterprise organisations make them more susceptible to costly breaches.

While these enterprises are often better equipped to detect incidents quickly, the time required to fully respond and mitigate these threats can span for hours, underscoring the challenge of managing widespread, complex IT environments.

As for SMBs, these organisations experienced an average of 16 incidents this year, while spending $0.3M for remediation, which is 1.5 times higher than their overall IT Security budget.

SMBs are the most disproportionately affected group in terms of budgetary impact. They often lack robust cybersecurity policies and procedures, which leaves them vulnerable to incidents involving employees, public cloud misconfigurations, and high-level permissions.

In the Middle East, Turkiye and Africa region organiations of all sizes reported to have experienced on average 13 incidents within a year.

“This data illustrates the continuation of the current trend of increasing cybersecurity spending across all market segments. This growth is driven by at least three key factors.

“Firstly, and obviously, the constant growth in the complexity of cybersecurity threats forces companies to adopt more advanced solutions to enhance the detection of attack traces and automate responses.

“Secondly, increasing concerns from governments regarding digital sovereignty leads to the emergence of new regulations and regulatory requirements and, as a result, increased expenses.

The third factor influencing the growth of cybersecurity budgets and costs is the constant increase in salary expectations for professionals in various cybersecurity fields,” comments Veniamin Levtsov, Vice President, Center of Corporate Business Expertise at Kaspersky.

To protect companies against a wide range of cyber threats, Kaspersky recommends:

  – Use all-encompassing solutions, such as those from the Kaspersky Next product line, that provide real-time protection, threat visibility, advanced investigation and response capabilities for companies of any size and industry.

  – Adopt a managed security service such as Kaspersky Managed Detection and Response if companies lack qualified InfoSec professionals. It will provide the necessary expertise and give them the best possible advanced automated security services. Thanks to its analysis of corporate data gathered every day, in real time, 24/7, it can shield businesses against sophisticated cyberattacks.

  – Educate your employees. Dedicated training courses can help, such as those provided in the Kaspersky Automated Security Awareness Platform.

 


Kindly share this post
Continue Reading

Trending