Connect with us

E-Business

Mobility: 64% Data Breaches Linked to Identity Theft

Published

on

cyber attack.jpg
Kindly share this post

Security concerns over convergence of personal and workplace identities are on increase, as‎ identity theft accounts for 64% of all data breaches across the globe.

In the latest report by Gemalto, it is revealed that consumer service breaches continue to rise, resulting in almost nine in ten (89%) enterprises addressing their access management security policies.

According to the report, 90% of IT professionals are concerned about employees using their personal credentials for work purposes, even as 62% of enterprises feel increasing pressure to match consumer authentication methods in the workplace.

The use of two-factor authentication is on the rise, with 40% of organizations’ employees using it.

Gemalto, the world leader in digital security, released the findings of its “Authentication and Identity Management Index”, which revealed that 90% of enterprise IT professionals are concerned that employee reuse of personal credentials for work purposes could compromise security.

However, with two thirds (68%) saying they would be comfortable allowing employees to use their social media credentials on company resources, Gemalto’s research suggests that personal applications (such as email) are the biggest worry to organizations.

The enterprise and consumer worlds are merging closer together, with enterprise security teams under increasing pressure to implement the same type of authentication methods typically seen in consumer services, such as fingerprint scanning and iris recognition.

Thus, Gemalto study shows six in ten (62%) believed this was the case, with a similar amount (63%) revealing they feel security methods designed for consumers provide sufficient protection for enterprises.

In fact, over half of respondents (52%) believe it will be just three years before these methods merge completely.

Employee expectations around usability and mobility are affecting how enterprises approach authentication and access management.

Nearly half of respondents stated that they are increasing resources and spending on access management.

Deployment rates are also increasing:  62% expect to implement strong authentication in two years’ time – up from 51% of respondents who said the same thing last year, and nearly 40% responded they will implement Cloud SSO or IDaaS within the next two years.

Enterprises are clearly seeing the benefits, with over nine in ten (94%) using two-factor authentication to protect at least one application and nearly all respondents (96%) expecting to use it at some point in the future.

Mobility security still a challenge, says the report. As more enterprises become mobile, the challenges in protecting resources while increasing flexibility for employees working on the move increases.

Despite an increasing amount of businesses enabling mobile working, a third (35%) completely restricted employees from accessing company resources via mobile devices and nine in ten (91%) are at least part-restricting access to resources.

This is backed up as half of businesses (50%) admit security is one of their biggest concerns to increasing user mobility.

In order to protect themselves against threats from increased mobility, enterprises are still most likely to be using usernames and passwords – two thirds of users at respondents’ organizations are using this authentication method, on average.

Currently, 37% of users at respondents’ organizations are required to use two-factor authentication to access corporate resources from mobile devices, on average. However, like the rise for access while in the office, on average, respondents believe this will increase to over half (56%) in two years’ time.

“From credential sharing to authentication practices, it’s clear that consumer trends are having a big impact on enterprise security,” said François Lasnier, Senior Vice President, Identity Protection at Gemalto. “But businesses need to make sure their data isn’t compromised by bad personal habits. It’s encouraging to see deployment of two-factor authentication methods on the rise, and increased awareness for cloud access management, as these are the most effective solutions for businesses to secure cloud resources and protect against internal and external threats. For IT leaders, it’s important that they keep pushing for security to be a priority at the board level, and ensure that it’s front of mind for everyone in an organization.”‎

‎Reacting to the report, Mr. Olufemi Ake, country manager, ESET West Africa told Nigeria CommunicationsWeek confirmed that the ‎uptake of Bring Your Own Device (BYOD)‎ in the region is one of the primary factors leading to breaches.

Ake said in a telephone interview “In fact, this report is factual based on our experiences with clients in this region. In as much as BYOD offers organizations flexibility in workplace, it is also creating challenges, especially when the device was not checked for malicious content right from the beginning.

“Employees now access and process company data even from home, most times, using personal emails. It is difficult to manage, unless you mandate them, right from the time of recruitment, on how company data must not be used.

“This has given rise to security solutions like Safetica which helps to monitor devices; how files are moved from the computer, uses or reused and for what purpose”.

He added that the report implies ‎companies must not relent with regards IT security in the coming year and moving forward.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

FG Plans to Make 95 Percent of Nigerians Digitally Literate by 2030

Published

on

Kindly share this post

Federal government has announced its plans to achieve 95 per cent digital literacy among Nigerians by 2030, with a specific target of training and empowering at least 30 million citizens by 2027.

FG Plans to Make 95 Percent of Nigerians Digitally Literate by 2030

The announcement was made on Thursday at the grand finale of the Digital for All Challenge 2.0, an initiative of Tech4Dev funded by the UK Government’s Digital Access Programme and implemented in partnership with the National Information Technology Development Agency (NITDA).

Kashifu Abdullahi, director-general, NITDA, represented by Aristotle Onumo, director of Stakeholder Management at the agency, said that over 30 million Nigerians, particularly in rural areas, are being targeted for training, with digital champions deployed nationwide to facilitate the programme.

“We are integrating digital literacy into school curricula nationwide, from primary to university level, and partnering with the Head of Civil Service to make digital skills a requirement for civil service progression,” Onumo said.

He added that NITDA aims to achieve 70 percent digital literacy by 2027 as a foundation for reaching 95 percent by 2030.

Onumo called on stakeholders to work together, stressing that digital literacy is for everyone — the young, the old, the employed, job seekers, traders, civil servants, and others.

In her welcome remarks, Mrs. Oladiwura Oladepo, Co-Founder of Tech4Dev, described the initiative as a national movement to deepen digital knowledge and inclusion across all levels of society.

She noted that the programme has already impacted over one million Nigerians drawn from all six geopolitical zones.

Oladepo said the Digital for All Challenge 2.0 is not just a competition but a movement to unlock opportunities and close the digital divide for individuals, families, and the nation.

Representing the British High Commission, Mr. Idongesit Udo, Digital Access Programme Adviser, praised the initiative for creating opportunities for young Nigerians to compete globally, enabling civil servants to deliver better services, and helping children begin their digital journey early.

He highlighted the UK’s broader partnership with Nigeria, which includes initiatives in cybersecurity (Africa Cyber Programme), standardization (British Standards Institute), and entrepreneurship (UK-Nigeria Tech Hub), all aimed at fostering a thriving digital economy.

At the event, participants from all six geopolitical zones competed in various categories.

The first prize winner, Miracle Michael, received N15 million. The second prize went to Chinedu Arisa, who received N12.5 million, while Ismail Adam and Uluchi Chibueze received N10 million and N7.5 million respectively.

Nkeiruka Onyejeocha, minister of State for Labour and Employment, who presented the awards, commended the initiative for equipping Nigerian youth with future-ready skills.

She emphasised that digital literacy is vital not only for job creation but also for national development, and encouraged more young people to take part in programmes of this nature.

 

 

 

 


Kindly share this post
Continue Reading

E-Business

NDPC Raises Alarm on Chrome Vulnerabilities, Urges Nigerians to Secure Devices

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has issued an urgent security advisory, warning Nigerians of critical vulnerabilities in Google Chrome that could expose users to severe cyber threats.

NDPC Raises Alarm on Chrome Vulnerabilities, Urges Nigerians to Secure Devices

The alert, posted on the Commission’s official X handle, underscores the risks of these flaws and calls for immediate action to safeguard personal devices and data.

According to the NDPC, the vulnerabilities could allow attackers to execute arbitrary code on a user’s system, potentially granting unauthorised access to computers.

This could enable cybercriminals to install malicious programs, view, alter, or delete sensitive data, and even create new user accounts with full administrative rights.

Such breaches could disrupt device functionality, compromise personal information, and lead to significant loss of control over affected systems.

“Multiple vulnerabilities have been discovered in Google Chrome. The most severe of these could allow an attacker to take over a user’s system,” the NDPC stated, emphasising the urgency of addressing the issue.

To mitigate these risks, the Commission has advised Chrome users to apply the latest browser updates immediately.

It also recommends operating devices with standard user rights instead of administrative privileges to limit potential damage. Additionally, the NDPC urged Nigerians to exercise caution by avoiding suspicious links, unsolicited attachments, and untrusted websites.

The advisory comes as part of Nigeria’s broader efforts to strengthen data protection.

 


Kindly share this post
Continue Reading

E-Business

Microsoft Seizes 340 Websites Linked to Nigerian-based Phishing Subscription Service

Published

on

Kindly share this post

Microsoft said on Tuesday that it seized nearly 340 websites tied to a rapidly growing Nigerian-based service that allowed users to carry out phishing operations that stole at least 5,000 Microsoft user credentials.

Microsoft obtained an order from the U.S. District Court in Manhattan earlier this month to seize domains associated with Raccoon0365, the subscription service that allowed users to carry out massive phishing campaigns, which sometimes involved thousands of emails at a time, according to Steven Masada, assistant general counsel for Microsoft’s Digital Crimes Unit.

Raccoon0365’s service, which operates through a private Telegram channel with more than 850 subscribers, enables users to impersonate trusted brands and get targets to enter Microsoft login credentials on phony Microsoft login pages, Masada said in a blog posted on Microsoft’s website.

The service has generated for its small group of operators at least $100,000 in cryptocurrency payments since launching in July 2024, Masada said in the blog. Microsoft said the seizure of the websites occurred over a period of days earlier this month.

Microsoft identified Nigeria-based Joshua Ogundipe as the leader and main operator of Raccoon0365.

Ogundipe did not immediately respond to an email request for comment sent to the email address identified by Microsoft in its court filing.

“Cybercriminals don’t need to be sophisticated to cause widespread harm,” Masada said. “Simple tools like Raccoon0365 make cybercrime accessible to virtually anyone, putting millions of users at risk.”

Raccoon0365 subscribers have targeted a wide swath of industries, Masada said, and separate court filings allege that “a significant portion” of Raccoon0365 activity targets organizations based in New York City.

Masada said Microsoft identified what it said was a Raccoon0365-related effort using tax-themed phishing emails to target more than 2,300 organizations, mostly in the U.S., between February 12 and February 28 this year, according to a company blog posted in April.

Errol Weiss, chief security officer of the Health Information Sharing & Analysis Center (Health-ISAC), which provides cybersecurity services to member health organizations and is a co-plaintiff alongside Microsoft, said Raccoon0365 has been linked to successful credential harvesting through phishing campaigns at at least five unnamed healthcare organizations, while targeting 25 health sector organizations overall. Once hackers gain that access, any number of things can happen, Weiss said.

“So many of the attacks start because somebody gave up their user name and password to a bad guy,” Weiss said in an interview. “Once that cybercriminal has access to the network, then it’s just up to the imagination in terms of what comes next and how they monetize it.”

The Raccoon0365 operators used services provided by Cloudflare to help hide the service’s backend infrastructure, the internet services firm said in its own blog post. Cloudflare worked with Microsoft and the U.S. Secret Service to disrupt Raccoon0365 operations on its platform and prevent the operators from establishing new accounts, the company said.

Blake Darché, the head of threat intelligence at Cloudflare, said in an interview that the Raccoon0365 operators made some key operational security mistakes but were highly effective.

“They’re in people’s accounts, they compromise lots of people, and it needs to obviously be stopped,” he said.

 


Kindly share this post
Continue Reading

Trending