E-Business
Scammers go ‘InterPlanetary’ Using a Decentralised File System in their Attacks

Kaspersky experts have discovered how cybercriminals are using the InterPlanetary File System (IPFS) in email phishing attacks. Since late 2022, fraudsters have been using this safe, decentralised and reliable way for file distribution – considered to be one of the cutting-edge technologies of Web 3.0 – to target companies around the world.

In a new report by Kaspersky, researchers reveal how attackers are putting phishing HTML files in IPFS to cut web hosting costs.
This technique, used for both ongoing mass and targeted phishing campaigns, saw almost 400,000 phishing emails detected in February 2023.
IPFS is a peer-to-peer distributed file system enabling users around the world to exchange files. Unlike centralised systems, IPFS uses addressing performed according to unique content identifiers (CID), and not file paths.
The file itself resides on the computer of the user who had “uploaded” it to IPFS and downloaded directly from that computer.
By default, uploading or downloading a file to IPFS requires special software (IPFS client). For users to view the files residing in IPFS freely without installing any software, the so-called gateways are provided.
In 2022, scammers began actively using IPFS for email phishing attacks. They place HTML files containing a phishing form in IPFS and use gateways as proxies, so that victims can open the file, whether or not they are running an IPFS client on their devices.
The scammers also include file access links via a gateway into phishing letters dispatched to would-be victims.
The use of a distributed file system allows attackers to cut back on phishing page hosting costs. Besides, it’s impossible to delete files uploaded by third parties from IPFS.
If somebody wants a file to disappear from the system completely, they can urge its owners to delete it, but the method will probably never work with cybercriminals anyway.
IPFS gateway providers attempt to combat IPFS phishing by regularly deleting links to fraudulent files.
Yet detection and deletion of links at gateway level does not always happen as quickly as the blocking of a phishing website, cloud form, or document. The URL addresses of IPFS files first appeared in October 2022. As for now, the campaign is ongoing and being blocked by Kaspersky.
Phishing letters containing IPFS links are hardly ever too original — they contain the typical phishing content the purpose of which is to obtain the victim’s account login and password. What is interesting about this technique is where the HTML page links go.
The URL parameter contains the recipient’s email address. Once modified, the corporate logo on top of the phishing form and email address entered into the login field will change too. This way, one link can be used in several phishing campaigns targeting different users — sometimes even in dozens of campaigns.
In late 2022, Kaspersky observed up to 15,000 IPFS phishing letters-a-day for most of the time. Starting this year, IPFS phishing began to grow in scale, reaching more than 24,000 letters-a-day in January and February.
February was the busiest month in terms of IPFS phishing activity. In that month alone, researchers observed almost 400,000 letters – a 100,000 increase than in November and December 2022.
“Attackers have and will continue to use cutting-edge technologies to reap profits. As of late, we have observed an increase in the number of IPFS phishing attacks — both mass and targeted.
“The distributed file system allows scammers to save money on domain purchase. Plus, it is not easy to completely delete a file, although, there are attempts to combat fraud at IPFS gateway level.
“The good news is that anti-spam solutions detect and block links to phishing files in IPFS, just like any other phishing links. In particular, Kaspersky products employ a number of heuristics to detect IPFS phishing,” comments Roman Dedenok, a security expert at Kaspersky.
E-Business
TD Africa Sponsors Check Point Secure 360 Summit to Boost Cybersecurity in Nigeria

Africa’s leading technology distributor Powerhouse, TD Africa, has reaffirmed its commitment to advancing cybersecurity awareness and digital resilience by sponsoring the 3rd Annual Secure 360 Summit Nigeria 2026, hosted by global cybersecurity leader Check Point Software Technologies, as Gold Sponsor.

Chioma Chimere, Coordinating Managing Director, TD Africa
This year’s summit was held in Abuja and Lagos, bringing together key stakeholders from across Nigeria’s technology ecosystem.
Now in its third edition, the Secure 360 Summit has evolved into one of Nigeria’s premier cybersecurity forums, bringing together Chief Information Security Officers (CISOs), Chief Information Officers (CIOs), IT Directors, and senior technology leaders from the financial services, telecommunications, enterprise, energy, and public sectors to address today’s rapidly evolving cyber threat landscape.
Speaking on the significance of the summit, Kingsley Oseghale, Country Manager, Check Point Nigeria, emphasized the need for stronger collaboration in tackling emerging cyber risks. “Cybersecurity has become a business priority rather than just an IT concern.
“Through the Secure 360 Summit, we continue to provide a platform for industry leaders to exchange insights, strengthen partnerships, and explore innovative approaches to securing today’s digital economy.
“We are pleased to have TD Africa as a valued partner in driving cybersecurity awareness across Nigeria.”
In her remarks, Chioma Chimere, Coordinating Managing Director, TD Africa, applauded Check Point for creating a platform that addresses one of the most critical challenges facing businesses and individuals. “Cybersecurity is everyone’s business. We owe it to ourselves, our organisations, and our communities to remain security-conscious in an increasingly connected world.
“At TD Africa, innovation drives everything we do, and innovation can only thrive in a secure environment.
“This is why we are proud to support initiatives like the Secure 360 Summit that promote knowledge sharing and strengthen our collective cyber resilience.”
The summit featured expert-led sessions on emerging cyber threats, artificial intelligence, cloud security, ransomware, and strategies for building resilient digital infrastructures, equipping participants with practical insights to navigate today’s cybersecurity landscape.
Through its continued partnership with global technology leaders like Check Point, TD Africa remains committed to empowering businesses across Africa with world-class cybersecurity solutions, fostering industry collaboration, and driving the continent’s secure digital transformation.
E-Business
Tinubu Orders NIMC to Enrol Every Nigerian by End of this Year – DG

President Bola Tinubu has directed the National Identity Management Commission (NIMC) to ensure that every Nigerian is enrolled in the national identity database before the end of 2026, according to Abisoye Coker-Odusote, director general and chief executive officer of the agency.

Abisoye Coker-Odusote, director general and chief executive officer, NIMC
Coker-Odusote, who appeared on Channels Television, said the directive forms part of the federal government’s efforts to establish a comprehensive national identity system capable of supporting effective governance, planning, and service delivery.
“The President has given us till the end of this year to make sure that we capture every single Nigerian,” she said.
According to her, NIMC is working with partners under the World Bank-supported Identification for Development (ID4D) project to accelerate nationwide enrolment.
“What we have done is we have partnered through the World Bank ID4D project with front-end partners. They are part of the digital identity ecosystem. These are private citizens that we’ve enabled and given jobs to enrol citizens on our behalf,” she explained.
She stressed that the National Identification Number (NIN) remains a unique identifier, ensuring that every individual is registered only once.
“That’s why it’s called a unique identifier, so that you’re only enrolled once,” the NIMC DG added.
Coker-Odusote said Nigeria’s actual population remains uncertain, with estimates ranging from 200 million to 250 million, making a comprehensive identity database essential for national planning.
“It is estimated that we’re 200 million. When we’re done enrolling, we will then know the actual numbers that we have. Some estimates say 230 million, while a few people say 250 million.
“Your identity is basically the foundation for effective governance and service delivery. How can you plan if you don’t know the total number of persons that you have? We have been mandated by Mr President to go down to the community levels to enrol every single Nigerian”, she said.
Responding to concerns about whether an individual could obtain multiple identities by registering in different locations or under different names, the NIMC boss said the commission’s biometric verification system prevents such occurrences.
She explained that while the previous system could accept duplicate enrolments before detecting them later, the current process automatically identifies and invalidates multiple registrations.
“The legacy system had no way of verifying at the front end whether you had already been captured. Once the record comes into the system, it flags it as a duplicate or that the person already exists in the database.
“You would only have one identity generated for you. The other record goes into a deduplication bucket where it is invalidated,” she said.
The NIMC DG added that biometric verification, including fingerprints and facial recognition, makes it virtually impossible for one person to maintain multiple identities.
“Absolutely. One of the things that this Act has done is to cement our role in capturing biometrics. Private and public sector organisations will no longer capture biometrics independently. They will validate identities through API integration with NIMC.
“The telcos are already doing that with us. If you need a SIM card, they capture your facial biometrics, which are matched against our database in real time to confirm that you are who you claim to be. We’re using biometric validation to tighten security around identity confirmation,” she said.
The remarks come weeks after Tinubu signed the National Identity Management Commission (NIMC) Act 2026 into law on June 26, repealing the 2007 legislation.
The new law reinforces the “One Person, One Identity” policy by making the NIN the country’s foundational identity credential for accessing government and essential private services, including banking, passport applications, tax administration, pensions, land transactions, and consumer credit.
It also introduces stiffer penalties for identity theft, multiple registrations and unauthorised access to personal identity data, while strengthening data privacy protections and granting NIMC wider powers to investigate identity-related offences.
E-Business
Kaspersky Warns of AI Risks for World Cup Fans

Cybersecurity and privacy experts are raising concerns around the growing trend of sports fans using generative AI to create World Cup-related images, mock-ups, predictions and social media content.

Whilst offering new ways for supporters to engage with major sporting events, these tools also introduce risks that many users may underestimate. In light of this, Kaspersky has shared the key risks fans should keep in mind when using generative AI tools, so they can continue enjoying the championship with peace of mind.
When fan AI goes rogue. A growing number of AI tools are being used to create World Cup-themed visuals, avatars, memes and other fan content. While these services may seem creative and harmless, not all of them come from trusted providers.
Many are launched quickly to capitalise on interest around major events, increasing the likelihood that users will interact with platforms that offer limited transparency around data handling, lack adequate privacy and security measures, or might even be designed with malicious intent.
Personal data at stake. To create customised World Cup content, users are often asked to upload selfies, sign up with an email address, connect social media accounts or share other personal information. In doing so, they may reveal more information than necessary without fully understanding how that data will be stored, used, or potentially exposed.
“AI-driven fan content may seem harmless, but one of the key privacy risks is that users are often encouraged to share far more personal information than necessary. A simple request to generate a themed avatar can involve the collection of photos, contact details, account data and behavioural insights – information that may later be insufficiently protected.
“Because major global events often create an ideal environment for opportunistic actors, fans should take a closer look at how these tools manage personal data before engaging with them,” says Anna Larkina, web content analysis and privacy expert at Kaspersky.
When fan content becomes a scam. AI-generated World Cup content in some cases can also be used to support fraud. Cybercriminals may use convincing mock-ups, fake giveaways, or official-looking fan pages to attract attention and build trust. Once users engage, they may be redirected to phishing sites, fake stores, fraudulent offers, or betting-related scams. Generative AI makes these campaigns easier to produce, more persuasive and far easier to scale.
The myth of AI predictions. Another area that deserves caution is AI-powered match prediction. However advanced or data-driven these tools may appear, AI cannot reliably predict inherently uncertain sporting outcomes. When used to promote betting, paid subscriptions or “insider communities”, such services can create a false sense of confidence and encourage risky decisions.
News2 days agoXora Finance, Fintech Firm Refuses to Hire Nigerians over Alleged Dishonesty
Telecom2 days agoNCC Advances Dig Once Policy, Engages Stakeholders on Cost-Based Framework for Duct Sharing
Telecom2 days agoNCC to Keynote Telecom Sector Sustainability Forum 7.0
General News2 days agoFG Secures Fresh $208.3m World Bank Loan for Cash Transfer
News2 days agoHow Ponzi Scheme Victims can Seek Legal Remedies — Lawyers
News2 days agoPalmPay Nigeria Appoints Samuel Oluyemi as Chief Operating Officer
Telecom1 day agoMTN Nigeria Slashes Cost of Broadband Internet Router, Unwraps New Data Bundles for Low-Budget Users
General News2 days agoSERAP Sues INEC over Alleged N800Bn 2027 Tinubu Campaign Fund


















