E-Business
Kaspersky Sees Abuse of Personal Information, Sophisticated Attacks in 2020
Kaspersky researchers have shared their vision on Advanced Persistent Threats (APTs) in 2020, pointing out how the landscape of targeted attacks will change in the coming months. The overall trend shows that threats will grow in sophistication and become more targeted, diversifying under the influence of external factors, such as development and propagation of machine learning, technologies for deepfakes development, or tensions around trade routes between Asia and Europe.
The predictions were developed based on the changes that Global Research and Analysis Team witnessed over 2019 to support the cybersecurity community with some guidelines and insights. The latter, along with a series of industry and technology threat predictions, will help to prepare for the challenges that lie in the coming 12 months.
The abuse of personal information: from deep fakes to DNA leaks
After a number of personal data leaks that happened in the past years, the number of personal details available made it easier for attackers to perform targeted attacks, based on victims leaked info. The bar has been raised, and in 2020 the threat actors will dive deeper, hunting for more sensitive leaks, such as biometric data.
The researchers pointed out a number of key technologies, which could lure victims of personal data abuse in the attackers’ traps, among them is publicly discussed video and audio Deep Fakes that can be automated and support profiling and creation of scams and social engineering schemes.
Other targeted threat predictions for 2020 include:
– False flag attacks reach a whole new level. This will develop further, with threat actors seeking not only to avoid attribution but also to actively lay the blame on someone else. Commodity malware, scripts, publicly available security tools or administrator software, mixed with a couple of false flags, where security researchers are hungry for any small clue, might be enough to divert authorship to someone else.
– Ransomware shifts toward targeted threats. A potential twist might be that, instead of making files unrecoverable, threat actors will threaten to publish data that they have stolen from the victim company.
– New banking regulations in EU open new attack vectors. As banks will be required to open their infrastructure and data to third parties who wish to provide services to bank customers, it is likely that attackers will seek to abuse these new mechanisms with new fraudulent schemes.
– More infrastructure attacks and attacks against non-PC targets. Determined threat actors have, for some time, been extending their toolsets beyond Windows, and even beyond PC systems, VPNFilter and Slingshot, for example, targeted networking hardware.
– Cyber attacks focus on trade routes between Asia and Europe. There are several ways this could play out. They include a growth in political espionage as governments seek to secure their interests at home and abroad. It is likely to extend also to technological espionage in situations of potential or real economic crisis and resulting instability.
– New interception capabilities and data exfiltration methods. Use of supply chains will continue to be one of the most difficult delivery methods to address. It is likely that attackers will continue to expand this method through manipulated software containers, for example, and abuse of packages and libraries.
– Mobile APTs develop faster. There are no good reasons to think this will stop any time soon. However, due to the increased attention given to this subject by the security community, we believe the number of attacks being identified and analysed in detail will also increase.
– Personal information abuse grows, armed with AI. It is very similar to some of the techniques discussed for driving election advertisements through social media. This technology is already in use and it is just a matter of time before some attackers take advantage of it.
“The future holds so many possibilities that there are likely to be things that are not included in our predictions. The extent and complexity of the environments in which attacks play out offer so many possibilities. In addition, no single threat research team has complete visibility of the operations of APT threat actors. We will continue to try and anticipate the activities of APT groups and understand the methods they employ, while providing insights into their campaigns and the impact they have,” says Vicente Diaz, security researcher at Kaspersky.
The predictions have been developed thanks to Kaspersky threat intelligence services from around the world. On November 20, Kaspersky GReAT researchers will also share their predictions for upcoming changes in the world of major threat actors in 2020.
E-Business
Firm Spots Rising Scam Activity Around the 2026 World Cup, from Bogus Tickets to $500,000 “grant” Emails
Millions of football fans around the world are gearing up for the World Cup, and cybercriminals are seizing the moment to exploit the heightened interest.
Experts at Kaspersky have uncovered various types of scams that mimic official tournament resources or leverage the event for unsafe purposes, putting users’ data and finances at significant risk.
On one of the fraudulent websites discovered, users are offered the option to buy tickets for FIFA World Cup matches, with payments accepted in almost any currency.
However, after completing the fake registration and payment steps, users risk not only losing money from their bank cards but also exposing sensitive personal data to attackers.
The site uses the official colour scheme of the 2026 tournament to mislead users. In addition, the scammers offer ways to contact them, either directly on the site or via messaging apps.
Another website offers users the chance to purchase “official merchandise” for the 2026 tournament, featuring images of mascot plush toys and T-shirts, with a wide selection available for “purchase.” To make the offer more enticing, the site highlights steep discounts. Additionally, to appear more credible, the scammers have added a “Trusted store” badge at the bottom of the page, along with a registration form that requests personal and banking details.
Another attack scenario involves fraudulent email campaigns, in which attackers attempt to trick users into sending money or click a phishing link. To increase the chances of engagement, the emails feature compelling subject lines and persuasive messaging.
In one of the examples identified, fans received emails allegedly sent by official representatives of the event regarding a fake decision from a dispute resolution chamber. The link provided in the email leads to a phishing page.
In some cases, users are targeted with scam emails claiming they have “won” a $500,000 grant to cover tickets, flights, and accommodation, followed by instructions to contact the sender to claim the “prize” funds. Kaspersky also reports email spam and unsolicited ads related to the sale of competition-themed merchandise and souvenirs, some of them might turn out to be a scam.
“Unfortunately, major sporting events that attract large audiences are never overlooked by scammers. Seemingly harmless or even appealing emails can often conceal not only dangerous links and malicious attachments.
In some cases, careless interaction with such messages can lead to serious device infections. We recommend that users ignore any suspicious emails and websites to protect their financial assets and keep their devices and personal data secure,” says Anna Lazaricheva, senior spam analyst at Kaspersky.
Nigeria Data Protection Commission (NDPC) has raised concerns over data sovereignty, national security as well as loss of economic value, as over 90 per cent of Nigeria’s data is hosted abroad.
Pic credit…247digitize.com
Vincent Olatunji, national commissioner/CEO, NDPC, stressed the importance of safeguarding Nigeria’s digital economy through strong data protection and privacy frameworks.
He spoke while while delivering a keynote address at the IoT West Africa Conference, where he stated that the trend poses significant risks to Nigeria’s control over its digital assets.
He further described the situation as precarious for the nation’s sovereignty, and called for urgent investment in local data infrastructure.
Olatunji, highlighted data sovereignty, the growing role of data centres, and regulatory expectations under the Nigeria Data Protection Act, 2023, noting both the benefits of compliance and the risks of non-compliance. Olatunji underscored that data centres are now critical infrastructure for Nigeria’s digital transformation.
While decrying that over 90 percent of the Nigeria’s data is hosted abroad which is precarious for the nation’s sovereignty he encouraged for more investment in the sector as it is projected to reach $1.9 billion by 2031.
Also speaking, Kashifu Inuwa, the director-general of the National Information Technology Development Agency (NITDA), said policy is emerging as the key driver of Nigeria’s digital transformation, particularly in shaping the development of the Lagos-Abuja digital corridor.
“While infrastructure responds to demand, policy creates the enabling environment for sustainable growth,”
Inuwa who was represented by Aristotle Onumo, director, stakeholders management and partnership at the IoT West Africa Conference in Lagos, on the theme “The Lagos-Abuja Digital Corridor: Building Africa’s Next Data Centre and Cloud Hub.”
Inuwa emphasised that while infrastructure responds to demand, policy remains the critical driver that creates an enabling environment for sustainable digital growth.
He explained that Nigeria’s broadband policy, which stipulates minimum speeds of 10 Mbps for rural areas and 25 Mbps for urban centres, provides a strategic framework for prioritising infrastructure deployment along the Lagos-Abuja digital corridor.
He cautioned, however, that without deliberate collaboration and partnership between government, the private sector, and civil society, widespread infrastructure rollout would remain challenging. “Collaboration is the pathway that massifies impact, while partnership harnesses collective intelligence. No one can achieve this in isolation,” he said.
Inuwa also spoke on the Nigerian Sovereign Cloud Project; a flagship initiative aimed at strengthening indigenous cloud service providers and preventing the dominance of Nigeria’s digital infrastructure by foreign hyperscale operators.
By scaling local infrastructure to meet global standards, the project seeks to domesticate data hosting, reduce operational costs, and improve access to cloud services across the country.
Opay, a financial technology (fintech) firm, is working with Citigroup Inc., Deutsche Bank AG, and JPMorgan Chase & Co. for an initial public offering (IPO).
According to a report by Bloomberg on Friday, sources said the platform, backed by SoftBank Group Corp., is considering a listing in the United States and is targeting a valuation of about $4 billion.
They added that the company could proceed with the share sale later this year, although the timing and size of the offering are yet to be finalised.
Opay is one of Africa’s fastest-growing fintech firms, offering mobile payments, transfers, and other financial services across Nigeria.
Advertisement
The fintech company, Citi, Deutsche Bank, and JPMorgan have not publicly commented on the IPO plans.
Like Opay, Flutterwave, a major fintech company in Africa is planning an IPO.
Telcos Recover N2 Trillion following Crackdown on Indebted Subscribers
NIS Warns Nigerians against Fraudulent Passport Payment Platforms
Organized Criminals Plunder Telecom Infrastructure across Nigeria, Cause Service Disruptions
MTN Nigeria Remits N878.7Bn Taxes, Levies in 2025
CBN to Raise N700Bn in First Treasury Bills Auction this May
Kaspersky Discovers Vulnerability in Qualcomm Snapdragon Chips that can Lead to Data Loss & Device Compromise
FG to Gift Nigerians over 100 Free TV Channels from May 15
MTN Suspends Data, Airtime Borrowing Service over New FCCPC Lending Rules
What Adekunle Gold’s Support Means for ‘The Gathering on 100
Bank Customers to Pay N1,500 for ATM Card Issuance, Replacement – CBN
News2 days agoStakeholders Applaud NiRA’s Leadership in Strengthening Nigeria’s Internet Infrastructure
E-Financial2 days agoTax Ombudsman Sets 30-Day Limit for Settlement of Tax Disputes
E-Business2 days agoNDPC Warns of Offshore Data Risks as 90 Percent of Country’s Data is Hosted Abroad
Broadcasting2 days agoDavid Ogbueli and Unseen Architecture of Global Transformation
General News2 days agoUBA Debunks Viral Divorce Claim against Elumelus, Suspects in Custody
E-Financial2 days agoAccess Bank Warns Nigerians against Fake WhatsApp Investment Groups using Aig-Imoukhuede’s Identity
General News2 days agoNITDA Partners Galaxy Backbone to Deliver Subsidised Cloud Services to Startups
E-Business22 hours agoFirm Spots Rising Scam Activity Around the 2026 World Cup, from Bogus Tickets to $500,000 “grant” Emails