Connect with us

E-Business

Microsoft Dominates as the Most Impersonated Brand for Phishing Scams in Q2 2023

Published

on

Kindly share this post

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies and a leading provider of cyber security solutions globally, has published its Brand Phishing Report for Q2 2023.

The report highlights the brands that were most frequently imitated by cybercriminals in their attempts to steal individuals personal information or payment credentials during April, May and June 2023.

Last quarter global technology company Microsoft climbed up the rankings, moving from third place in Q1 2023 to top spot in Q2. The tech giant accounted for 29% of all brand phishing attempts.

This may be partially explained by a phishing campaign that saw hackers targeting account holders with fraudulent messaging regarding unusual activity on their account.

The report ranked Google in second place, accounting for 19% of all attempts and Apple in third, featuring in 5% of all phishing events during the last quarter. In terms of industry, the technology sector was the most impersonated, followed by banking and social media networks.

At the beginning of this year, CPR warned of an upward trend that saw phishing campaigns leveraging the finance industry, and this has continued over the last three months. For example, American banking organization Wells Fargo took fourth place this quarter due to a series of malicious emails requesting account information.

Similar tactics were noted in other scams that imitated brands such as Walmart and LinkedIn, which also featured in this report’s top ten list taking sixth and eighth place.

“While the most impersonated brands move around quarter to quarter, the tactics that cybercriminals use scarcely do. This is because the method of flooding our inboxes and luring us into a false sense of security by using reputable logos has proven successful time and time again,” said Omer Dembinsky, Data Group Manager at Check Point Software.

This is why we all must commit to stop and review, taking a moment before clicking on any link we don’t recognize. Does something feel off? Is there bad grammar or any language that is prompting an instant response? If so, this may be an indicator of a phishing email.

For organizations worried about their own data and reputation, it is key that they take advantage of the right technologies that can effectively block these emails before they have chance to dupe a victim.

In its latest Titan release R81.20, Check Point has also announced an inline security technology called Zero Phishing was enhanced now with a new engine called Brand Spoofing Prevention, designed to stop brand impersonation and scaled to detect and block also local brands that are used as lures, in any language, any country, and it’s also prevents pre-emptively as the engine recognized the fake domains on registration stage and blocks access to them.

The solution uses an innovative AI-Powered engine, advanced Natural Language Processes and improved URL scanning capabilities to auto-inspect possible malicious attempts and block access to impersonated local and global brands across multiple languages and countries, resulting in a 40% higher catch rate than traditional technologies.

In a brand phishing attack, criminals try to imitate the official website of a well-known brand by using a similar domain name or URL and a web-page design that resembles the genuine site.

The link to the fake website can be sent to targeted individuals by email or text message, a user can be redirected during web browsing, or it may be triggered from a fraudulent mobile application. The fake website often contains a form intended to steal users credentials, payment details or other personal information.

Top phishing brands in Q2 2023

Below are the top brands ranked by their overall appearance in brand phishing attempts:

  1. Microsoft (29%)
  2. Google (19.5%)
  3. Apple (5.2%)
  4. Wells Fargo (4.2%)
  5. Amazon (4%)
  6. Walmart (3.9%)
  7. Roblox (3.8%)
  8. LinkedIn (3%)
  9. Home Depot (2.5%)
  10. Facebook (2.1%)

Microsoft Phishing Email Unusual Activity Example

In the second quarter of 2023, a phishing campaign targeted Microsoft account holders by sending fraudulent messages regarding unusual sign-in activity.

The campaign involved deceptive emails which were sent allegedly from inside the company with sender names such as Microsoft on <company domain>. The subject line of these phishing emails was “RE: Microsoft account unusual sign-in activity” and they claimed to have detected unusual sign-in activity on the recipient’s Microsoft account. The emails provided details of the alleged sign-in, such as the country/region, IP address, date, platform and browser.

To address this supposed security concern, the phishing emails urged recipients to review their recent activity by clicking on a provided link which leads to malicious websites unrelated to Microsoft. The URLs used in the campaign, such as hxxps://online.canpiagn[.]best/configurators.html and hxxps://bafybeigbh2hhq6giieo6pnozs6oi3n7x57wn5arfvgtl2hf2zuf65y6z7y[.]ipfs[.]dweb[.] The link is currently inaccessible, but the assumption is that they were designed to steal user credentials or personal information, or to download malicious content onto the users device.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Schmidt, Ex Google Chief Says AI Risky in Terrorist Hands

Published

on

Eric Schmidt, former Google CEO
Kindly share this post

Eric Schmidt, former Google CEO has expressed concerns about the extreme risks posed by artificial intelligence (AI) falling into the hands of terrorists or rogue states.

Schmidt, Ex Google Chief Says AI Risky in Terrorist Hands

Eric Schmidt, former Google CEO

He warned that nations such as North Korea, Iran, and Russia could adopt AI technologies to develop weapons capable of causing significant harm, including biological weapons.

Schmidt urged governments to oversee private tech companies, emphasising, “The real fears I have are not the ones most people discuss about AI, I talk about extreme risk.”

“I’m always worried about an ‘Osama Bin Laden’ scenario, where truly evil individuals take control of some aspect of modern life to harm innocent people,” he added.

With private companies driving AI advancements, he stressed the need for careful government monitoring and regulation. “It’s really important that governments understand what we’re doing and keep their eye on us,” he said.

His remarks followed a two-day AI summit in Paris, where the UK and the U.S. declined to sign a communiqué outlining the future direction of AI. The declaration on “inclusive and sustainable artificial intelligence for people and the planet” was endorsed by 57 countries, including India, China, the Vatican, the EU, and the African Union Commission.

The UK justified its decision, stating that the agreement lacked “practical clarity” on global AI governance and national security concerns.

Schmidt supports U.S. export controls restricting the sale of advanced AI microchips to certain countries, aiming to slow adversaries’ progress in AI research.

He also highlights the importance of international collaboration on AI safety, suggesting that cooperation with nations like China is essential to addressing global AI challenges.

 

 


Kindly share this post
Continue Reading

E-Business

OpenAI CEO Rejects $97.4Bn Takeover Bid from Elon Musk

Published

on

Sam Altman, chief executive of ChatGPT-owner OpenAI
Kindly share this post

Sam Altman, chief executive of ChatGPT-owner OpenAI, has firmly declared the company “not for sale” following a $97.4bn (£78.4bn) takeover bid from a consortium led by Elon Musk.

OpenAI CEO Rejects $97.4Bn Takeover Bid from Elon Musk

Elon Musk

Speaking at the AI Action Summit in Paris, Altman emphasised OpenAI’s mission to develop AGI (artificial general intelligence) for the benefit of humanity.

Marc Toberoff, attorney for Elon Musk, confirmed the bid submission on Monday.

In response, Altman humorously offered to buy Twitter for $9.74 billion on Musk’s platform.

Unlike many tech giants, OpenAI is not publicly traded but operates through a complex partnership between non-profit and for-profit entities.

Musk aims to return OpenAI to its non-profit roots, despite owning a rival firm, xAI.

Christie Pitts, a tech investor, expressed scepticism about Musk’s intentions, noting his competitive interests.

Altman echoed this sentiment, suggesting Musk’s move disregards OpenAI’s mission.

Altman, who holds no stock in OpenAI, advocates transforming the organisation into a fully for-profit company to raise more funds for AI research.

Although the board has the final say, the $97.4bn offer falls short of OpenAI’s previous $157bn valuation and rumoured $300bn in future funding talks.

Toberoff stated the consortium might increase their bid. Meanwhile, OpenAI is collaborating with Oracle, a Japanese investment firm, and an Emirati sovereign wealth fund on “The Stargate Project,” a $500 billion AI infrastructure initiative announced by President Donald Trump.

 

 

 

 


Kindly share this post
Continue Reading

E-Business

Adobe Launches AI Video Tool to Compete with OpenAI

Published

on

Kindly share this post

Adobe yesterday released the first public version of an artificial intelligence tool that can generate video clips and revealed how much it will charge, but said it will not set pricing for major users such as studios until later this year.

The Firefly Video Model, as Adobe is calling the service, will compete against Sora, a model developed by ChatGPT creator OpenAI, and startup Runway, both of which currently offer video-generation services. Facebook owner Meta Platforms has also developed a video-generation AI model but has not given a timeline for when it will be released.

Adobe’s model differs from its rivals because it is geared toward generating clips that will fit into how film and television studios use Premiere Pro, its flagship video editing software.

To that end, many of the features that Adobe is emphasizing revolve around feeding existing shots into the video model and asking it to generate clips that fix or expand on shots that were taken on a real production set but that did not come out quite right.

Adobe said the service will generate five-second clips at 1080p resolution. While that is shorter than the clips of up to 20 seconds generated by OpenAI’s service, Adobe executives said the majority of individual clips in most productions are only three seconds.

Adobe said a user can generate 20 clips per month for $9.99 and 70 clips for $29.99. That compares with 50 videos for $20 per month with OpenAI’s plan at lower resolution and a $200 OpenAI plan that can handle longer, higher resolution videos.

Adobe is also working on a “Premium” pricing plan for studios and other high-volume video users and will release those pricing details later this year. Alexandru Costin, Adobe’s vice president of generative AI, said the company is working to generate 4K video and will remain focused on quality rather than longer clips.

“We actually think that great motion, great structure, great definition scheme, making the actual clip look like it was film, is more important than making a longer clip that’s unusable,” Costin told Reuters.

 


Kindly share this post
Continue Reading

Trending