Connect with us

E-Business

Kaspersky Warns Local Businesses of Active Docusign-themed Phishing Scams

Published

on

Kindly share this post

Kaspersky is warning of a rising phishing scam involving fraudulent emails pretending to be from Docusign, a globally used e-signature platform.

Cyber attackers are sending these emails with links to fake websites where users are asked to enter a work login and password.

The Docusign phishing attack begins with an email that resembles legitimate communication from the service provider. Unlike other phishing schemes, the malicious actors generally do not bother to forge or mask the sender address given how genuine Docusign emails can originate from any address due to the customisation options available to Docusign customers.

Typically, the victim is notified that they must electronically sign a financial-related document, with the click through link included in the email received. In some instances, the phishers can also include a PDF attachment with a QR code inside.

The victim is prompted to open the attachment and scan this QR code, supposedly to access the document for signing, however in reality this leads to a phishing website intended to gather users’ credentials.

The tactics and quality of execution can vary from email to email. However, the core principle remains the same: phishers rely on the recipient not understanding how e-signing with Docusign actually works. The inattentive victim follows the link (or QR code) to the phishing page and enters their work login credentials, which go straight to the attackers.

Usernames and passwords harvested through successful phishing attacks are often compiled into databases sold on illicit dark web marketplaces and later used to attack organisations.

The whole purpose of Docusign is to make it as easy as possible for companies and individuals to exchange electronically-signed documents. Any additional steps or restrictions — such as creating an account, entering credentials, opening attachments, or using only a smartphone to sign — go against this principle.

Therefore, Docusign asks for none of this and strives to make the signing process as quick and simple as possible.

To protect against this Docusign phishing tactic or other scams that impersonate popular services, Kaspersky recommends the following:

  • Have an understanding around how the genuine service works: For example, Docusign will never:

o    Send a PDF attachment with a link to a document to be signed.

o    Give you no choice but to scan a QR code. Docusign works on both mobile devices and computers, so a link is always provided to access the document – not a QR code.

o    Require you to enter work login credentials.

o    Force you to register with or log in to Docusign. After you sign the document, Docusign might suggest creating an account, but it’s entirely optional.

  • Be cautious of links and attachments: Avoid clicking on any unexpected links or downloading attachments in unsolicited emails.
  • Train employees: Companies should educate employees on how to recognise phishing attempts. Specialised training systems such as Kaspersky Automated Security Awareness Platform can be of help.
  • Use security solutions: Filtering out suspicious and unwanted email at the gateway level with products such as Kaspersky Security for Mail Server prevents employees from being defrauded by socially engineered scams. Security solutions for endpoints relevant to the size of the organisation – such as  Kaspersky Small Office Security or Kaspersky Next – will also secure from phishing redirects.
  • Use multi-factor authentication: This measure adds an extra layer of protection for sensitive accounts and services.

“Phishers are increasingly using names of trusted services like Docusign. We advise all IT users both at work and at home to always verify the sender’s identity and avoid clicking on suspicious links. Companies should ensure their teams know how to identify phishing emails, while multi-factor authentication and email filtering solutions add an extra level of defence,” Roman Dedenok, a cybersecurity expert at Kaspersky, concludes.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Adobe Launches AI Video Tool to Compete with OpenAI

Published

on

Kindly share this post

Adobe yesterday released the first public version of an artificial intelligence tool that can generate video clips and revealed how much it will charge, but said it will not set pricing for major users such as studios until later this year.

The Firefly Video Model, as Adobe is calling the service, will compete against Sora, a model developed by ChatGPT creator OpenAI, and startup Runway, both of which currently offer video-generation services. Facebook owner Meta Platforms has also developed a video-generation AI model but has not given a timeline for when it will be released.

Adobe’s model differs from its rivals because it is geared toward generating clips that will fit into how film and television studios use Premiere Pro, its flagship video editing software.

To that end, many of the features that Adobe is emphasizing revolve around feeding existing shots into the video model and asking it to generate clips that fix or expand on shots that were taken on a real production set but that did not come out quite right.

Adobe said the service will generate five-second clips at 1080p resolution. While that is shorter than the clips of up to 20 seconds generated by OpenAI’s service, Adobe executives said the majority of individual clips in most productions are only three seconds.

Adobe said a user can generate 20 clips per month for $9.99 and 70 clips for $29.99. That compares with 50 videos for $20 per month with OpenAI’s plan at lower resolution and a $200 OpenAI plan that can handle longer, higher resolution videos.

Adobe is also working on a “Premium” pricing plan for studios and other high-volume video users and will release those pricing details later this year. Alexandru Costin, Adobe’s vice president of generative AI, said the company is working to generate 4K video and will remain focused on quality rather than longer clips.

“We actually think that great motion, great structure, great definition scheme, making the actual clip look like it was film, is more important than making a longer clip that’s unusable,” Costin told Reuters.

 


Kindly share this post
Continue Reading

E-Business

GSMA Launches Innovation Fund to Boost AI Solutions in Emerging Markets

Published

on

Kindly share this post

GSMA Innovation Fund for Impactful AI has been unveiled, marking a significant initiative aimed at empowering small and growing enterprises in low-and middle-income countries (LMICs) across Africa, South Asia, Southeast Asia, and the Pacific.

GSMA Launches Innovation Fund to Boost AI Solutions in Emerging Markets

This fund is designed to fos­ter AI-driven innovations that tackle critical socio-economic and climate challenges, helping underserved regions unlock the transformative potential of ar­tificial intelligence.

Artificial intelligence has proven its ability to address pressing global issues, from pre­cision agriculture and renew­able energy to remote health­care and financial inclusion.

Yet, LMICs remain under­served in funding and resourc­es, with only a small percentage of global grants directed toward locally-developed AI solutions.

Despite the growth of AI-driven technologies, these advancements are often not tailored to the unique needs of local populations in LMICs.

The GSMA Innovation Fund seeks to close this gap by iden­tifying, testing, and scaling impactful AI solutions that are contextually relevant and capa­ble of delivering measurable socio-economic and climate benefits.

In partnership with the UK Foreign, Commonwealth, and Development Office (FCDO), the GSMA Innovation Fund provides a comprehensive sup­port package to selected enter­prises. Key benefits include:

Grant Funding: Ranging from £100,000 to £250,000 for projects lasting 15–18 months.

Tailored Venture Support: Guidance to strengthen busi­ness models and improve scal­ability.

Partnership Opportunities: Facilitation of collaborations with mobile operators, public sector organizations, and other stakeholders.

Peer Learning: Platforms for exchanging knowledge and best practices with other innovators.

Visibility and Exposure: Access to GSMA’s global events, publications, and online plat­forms to connect with potential investors and partners.

 


Kindly share this post
Continue Reading

E-Business

MRA Calls for Safer Internet User Rights in Nigeria

Published

on

Kindly share this post

Media Rights Agenda (MRA) has called on the Nigerian government to take legitimate measures to safeguard the rights and safety of internet users in the country.

MRA Calls for Safer Internet User Rights in Nigeria

In a statement released ahead of Safer Internet Day (SID), the Media Rights Agenda (MRA) called on the Nigerian Federal and State governments to take measures to protect internet users’ rights.

MRA highlighted the misuse of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2015, initially designed to address cybercrime threats.

According to MRA, the Act has been exploited by powerful individuals to intimidate journalists, activists, and citizens, undermining freedom of expression and cybersecurity.

Mr. Ayode Longe, deputy executive director, MRA, emphasised that these actions violate democratic principles and Nigeria’s international human rights obligations. He highlighted the SID theme “Together for a Better Internet” as a call for multi-stakeholder cooperation to create a safe and accessible online environment.

Longe noted Nigeria’s progress in digital technology adoption but pointed out persistent online threats, including scams, data breaches, and misinformation.

He stressed the need for legal frameworks that protect users’ rights without compromising their privacy or freedom of expression.

MRA urged the government to review the Cybercrimes Act to ensure it aligns with international human rights standards and to establish guidelines to prevent arbitrary prosecutions.

MRA also called for digital literacy initiatives and collaboration with tech companies to promote online safety.

Additionally, they urged the courts to protect Nigerians’ rights by rejecting unfounded cybercrime cases and ensuring fair application of the law.

Longe reiterated MRA’s commitment to defending digital rights and advocating for a free and open digital environment where everyone can access information and express themselves responsibly.

Together, stakeholders can create an internet where all users, regardless of age or background, can engage safely and freely.


Kindly share this post
Continue Reading

Trending