E-Business
Kaspersky Warns that Scammers Hide Phishing Links behind Images
At the end of August, Kaspersky experts discovered a phishing campaign with an unusual attack vector – through an image. This scam targeted organisations in the fields of online retail, distribution, transportation, and logistics. The cyber attackers aimed to steal corporate email credentials from potential victims.
Within the phishing scheme, the cyber attackers send emails in English, allegedly on behalf of a South Korean company. Pretending to be employees of this organisation, the cybercriminals email about sending instructions to their bank for transferring a payment.
They ask potential victims to check the details in the scanned document, which is added to the body of the letter. According to the legend, this must be done quickly in order to receive payment as soon as possible.
“The image in these phishing emails is poorly visible – this is what the attackers are counting on. Even if a person does not expect an email, he may be interested in looking at the details. However, in reality, the image hides a phishing link.
If the users click on the scan, they will be redirected to a fake resource that mimics a file sharing service from Adobe. There, they will be asked to enter the credentials for a corporate email account to gain access to the document.
However, this should never be done, otherwise this information will go to the cybercriminals,” comments Roman Dedenok, a cybersecurity expert at Kaspersky.
To avoid becoming a victim of such phishing attacks, Kaspersky recommends that users do not trust emails from unknown mailboxes, especially when it comes to confidential data, financial transactions and suspicious attachments, even if it visually looks like the email came from an organisation with a good reputation.
Kaspersky also recommends that companies install a reliable security solution that will automatically send such emails to spam, such as Kaspersky Secure Mail Gateway, and also regularly conduct cybersecurity training for employees, teaching them how to recognise social engineering techniques, for example, using the Kaspersky Automated Security Awareness Platform.
E-Business
Nigeria to Launch Certificate-Based Digital Literacy Course Nationwide
The Federal Government of Nigeria is set to launch a certificate-based digital literacy course across universities nationwide. This initiative aims to enhance students’ proficiency in digital skills, preparing them for the evolving technological landscape.
The program will be implemented in collaboration with the National Information Technology Development Agency (NITDA) and other stakeholders. It aligns with the government’s goal to achieve a 70% digital literacy rate among Nigerians within three years, targeting the training of 30 million Nigerians.
To further promote the Digital4All initiative, Director General Kashifu Inuwa Abdullahi CCIE led a delegation from NITDA to meet with the Executive Secretary of the National Universities Commission (NUC), Chris J. Maiyaki, to discuss collaboration on digital literacy.
The discussion focused on integrating digital literacy and skills as a general course in all universities to accelerate the goal of achieving 70% digital literacy by 2027 and positioning the nation as a global talent exporter. This aligns with the agency’s strategy of fostering digital literacy and cultivating talent in line with President Tinubu’s Renewed Hope Agenda.
During the visit, the Executive Secretary expressed readiness to collaborate with the agency in embedding and streamlining the initiative to further promote the digital economy.
This collaboration underscores the importance of integrating digital literacy into higher education curricula to equip students with essential skills for the digital age. By embedding digital literacy into university programs, Nigeria aims to produce a workforce adept in technology, thereby enhancing the nation’s competitiveness in the global digital economy.
E-Business
Firm Predicts AI, Privacy to Shape Consumer Cybersecurity Landscape in 2025
According to Kaspersky’s latest report, artificial intelligence (AI) will become an integral part of daily life, while privacy concerns around biometric data and advanced technologies will take center stage in 2025. These forecasts are part of the annual Kaspersky Security Bulletin series, which provides an outlook on the cybersecurity trends and threats expected to impact consumers in the coming year.
AI becomes an everyday reality
AI is predicted to fully integrate into daily life in 2025, becoming a standard tool rather than a novel technology. With prominent operating systems like iOS and Android rolling out AI-enhanced features, people will increasingly rely on AI for communication, workflows, and creative tasks.
However, this normalisation also brings challenges, particularly as personalised deepfakes become increasingly sophisticated in the absence of reliable detection tools.
Privacy regulations will expand user data ownership
The growing emphasis on privacy is expected to lead to new regulations that strengthen user control over personal data. By 2025, individuals may gain the right to monetise their data, transfer it easily across platforms, and benefit from simplified consent processes.
Global frameworks, such as the EU’s GDPR, California’s CPRA and South Africa’s POPIA, continue to inspire reforms worldwide, while decentralised storage technologies could further strengthen user autonomy over their information.
Fraudsters will continue to exploit premieres and releases
Cybercriminals are expected to target prominent gaming, console, and film launches in 2025. Titles like Mafia: The Old Country, Civilization VII, and Death Stranding 2, as well as the anticipated Nintendo Switch 2, are likely to attract scams involving fake pre-orders, counterfeit rootkits, and malicious downloads.
Similarly, blockbuster films like Superman and Jurassic World Rebirth may trigger phishing campaigns and counterfeit merchandise fraud aimed at enthusiastic fanbases.
Political polarisation will fuel cyberbullying
Increasing political polarisation is expected to exacerbate cyberbullying in 2025. Social media algorithms that amplify divisive content, combined with the widespread availability of AI tools for creating deepfakes and doctored posts, are likely to intensify online harassment. Cross-border cyberbullying could also escalate as global platforms facilitate the targeting of individuals based on their political beliefs.
Rising number of subscription services will fuel fraud risks
As the global economy shifts further towards subscription-based models, a rise in fraud related to fake subscription promotions is expected. Cybercriminals are expected to create counterfeit services that mimic legitimate platforms, aiming to deceive users into providing personal and financial information, resulting in identity theft and financial losses.
Additionally, the growth of unofficial resources that provide discounted or free access to subscription services is expected to become a significant threat vector, exposing users to phishing attacks, malware, and data breaches.
Prohibition of social media for children may lead to broader user restrictions
Australia’s proposed legislation to ban social media access for children under 16 could set a global precedent. If implemented successfully, the restriction could pave the way for broader limitations on access for other demographics.
Platforms like Instagram have already begun adopting AI-powered age-verification systems, signaling a shift toward stricter governance of online spaces.
“As we look to 2025, the most significant impact on consumers is expected to arise from the intersection of innovation and regulation. Advances in AI, privacy protection, and data ownership frameworks will reshape the way people interact with technology and manage their digital lives.
These developments hold immense potential but also demand careful oversight to ensure they serve consumer interests,” said Anna Larkina, Kaspersky privacy expert.
E-Business
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence (AI) in cyberattacks.
According to the findings, 70% of surveyed companies in the Middle East, Turkiye and Africa (META) region reported a rise in cyber incidents over the past year, with over half of respondents (53%) noting that many of these attacks were likely AI-driven.
The study underscores the reality that AI, which has revolutionised numerous industries, is now also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.
In its latest study titled “Cyber defense & AI: Are you ready to protect your organisation?” Kaspersky gathered the opinions of IT Security and Information Security professionals working for SMEs and Enterprise-level companies regarding new challenges in protecting their organisations against cyberattacks involving the use of AI.
Leveraging AI by cybercriminals is a serious concern for 73% of respondents from the META region. The pressure of this challenge is pushing companies to reassess their cybersecurity strategies and look for solutions that are both proactive and comprehensive.
To effectively tackle AI-amplified threats, businesses in the META region consider regular training to build internal expertise (94%), highly qualified personnel (94%), and relevant external cybersecurity expertise (93%) as the most important factors for protecting their organisations.
They also recognise the importance of having enough staff in their IT teams (91%) and using third-party security solutions (89%).
Despite rising awareness, the study reveals a concerning gap in readiness among many companies.
Over half of the organisations surveyed in the META region lack crucial resources needed to address these sophisticated threats – 56% don’t have the relevant external cybersecurity expertise at their disposal, 51% report that their IT teams are not large enough, 44% lack highly qualified staff, and 45% fall short in regular training efforts.
Additionally, 49% of respondents do not think they have adequate security solutions in place, exposing them to potential vulnerabilities. While most respondents claim to know how to address this lack of resources, the fact remains that they aren’t in place.
“The cybersecurity landscape today mirrors past challenges, with businesses questioning if current solutions suffice. Ransomware, once a primary threat, now demonstrates a dangerous surge, and business decision-makers start questioning the causes of this resurgence.
“The recent hype around AI offers an easy, if not entirely correct explanation. In reality, while using AI to create convincing phishing messages or more effective reconnaissance may be of some help, the root causes are most often more straightforward: cybercriminals have become more organised, better at collaborating, developing innovative attack strategies, and lowering the barriers for less skilled and resourceful attackers.
“So, while it’s useful to keep an eye on AI progress that can enable both attackers and defenders with new options, there are solid strategies companies can – and should – implement immediately.
“Companies should prioritise securing critical IT infrastructure with robust, multi-layered solutions that offer a unified security context. An XDR ecosystem, combined with skilled expertise – whether in-house or through a managed service – can greatly enhance defences.
“Additionally, ongoing employee training, including cybersecurity basics and safe AI practices, adds another critical layer of protection for the organisation,” says Oleg Gorobets, corporate infrastructure protection expert at Kaspersky.
- Telecom2 days ago
Meta Confirms No AI Interference in 2024 Elections
- News2 days ago
Ecobank Sends Important Message to Customers Over Service Disruptions
- Telecom2 days ago
Interswitch and CeBIH Join Forces to Promote Payment System Vision 2030
- E-Financial2 days ago
NDIC Begins Sales Of Landed Properties, Chattels Of Heritage Bank Nationwide
- Telecom2 days ago
Telecoms Subscribers to Petition National Assembly Over Controversial 5% Tax
- News1 day ago
Firm Sues NIMC, Others On Digital Rights Breach Allegations
- News2 days ago
Galaxy Backbone Hosts Governor Mutfwang in a Move to Advance Plateau State’s Digital Future
- Telecom1 day ago
Netflix Exits Nigerian Movie Market After Eight Years