E-Business
Scammers go ‘InterPlanetary’ Using a Decentralised File System in their Attacks

Kaspersky experts have discovered how cybercriminals are using the InterPlanetary File System (IPFS) in email phishing attacks. Since late 2022, fraudsters have been using this safe, decentralised and reliable way for file distribution – considered to be one of the cutting-edge technologies of Web 3.0 – to target companies around the world.
In a new report by Kaspersky, researchers reveal how attackers are putting phishing HTML files in IPFS to cut web hosting costs.
This technique, used for both ongoing mass and targeted phishing campaigns, saw almost 400,000 phishing emails detected in February 2023.
IPFS is a peer-to-peer distributed file system enabling users around the world to exchange files. Unlike centralised systems, IPFS uses addressing performed according to unique content identifiers (CID), and not file paths.
The file itself resides on the computer of the user who had “uploaded” it to IPFS and downloaded directly from that computer.
By default, uploading or downloading a file to IPFS requires special software (IPFS client). For users to view the files residing in IPFS freely without installing any software, the so-called gateways are provided.
In 2022, scammers began actively using IPFS for email phishing attacks. They place HTML files containing a phishing form in IPFS and use gateways as proxies, so that victims can open the file, whether or not they are running an IPFS client on their devices.
The scammers also include file access links via a gateway into phishing letters dispatched to would-be victims.
The use of a distributed file system allows attackers to cut back on phishing page hosting costs. Besides, it’s impossible to delete files uploaded by third parties from IPFS.
If somebody wants a file to disappear from the system completely, they can urge its owners to delete it, but the method will probably never work with cybercriminals anyway.
IPFS gateway providers attempt to combat IPFS phishing by regularly deleting links to fraudulent files.
Yet detection and deletion of links at gateway level does not always happen as quickly as the blocking of a phishing website, cloud form, or document. The URL addresses of IPFS files first appeared in October 2022. As for now, the campaign is ongoing and being blocked by Kaspersky.
Phishing letters containing IPFS links are hardly ever too original — they contain the typical phishing content the purpose of which is to obtain the victim’s account login and password. What is interesting about this technique is where the HTML page links go.
The URL parameter contains the recipient’s email address. Once modified, the corporate logo on top of the phishing form and email address entered into the login field will change too. This way, one link can be used in several phishing campaigns targeting different users — sometimes even in dozens of campaigns.
In late 2022, Kaspersky observed up to 15,000 IPFS phishing letters-a-day for most of the time. Starting this year, IPFS phishing began to grow in scale, reaching more than 24,000 letters-a-day in January and February.
February was the busiest month in terms of IPFS phishing activity. In that month alone, researchers observed almost 400,000 letters – a 100,000 increase than in November and December 2022.
“Attackers have and will continue to use cutting-edge technologies to reap profits. As of late, we have observed an increase in the number of IPFS phishing attacks — both mass and targeted.
“The distributed file system allows scammers to save money on domain purchase. Plus, it is not easy to completely delete a file, although, there are attempts to combat fraud at IPFS gateway level.
“The good news is that anti-spam solutions detect and block links to phishing files in IPFS, just like any other phishing links. In particular, Kaspersky products employ a number of heuristics to detect IPFS phishing,” comments Roman Dedenok, a security expert at Kaspersky.
E-Business
Global Crypto Heists Surge to $2.1Bn in H1 2025 as Digital Assets is Weaponised

In a sobering revelation of the evolving threat landscape facing the digital asset ecosystem, blockchain intelligence firm TRM Labs has disclosed that over $2.1 billion worth of cryptocurrency was stolen in the first half of 2025 alone, spanning at least 75 high-profile hacks and exploits.
This staggering figure marks a 10 per cent surge over the previous first-half record set in 2022 and nearly eclipses the total stolen in all of 2024.
But beyond the monetary scale, the report reveals a deeper concern: a growing trend of state-sponsored cyber aggression weaponising crypto assets for strategic and geopolitical purposes.
The most devastating breach to date occurred in February when Dubai-based exchange Bybit lost $1.5 billion—the largest crypto heist in history.
TRM Labs attributes the attack to North Korean state actors, noting that the incident alone accounted for nearly 70 percent of total losses during the period and doubled the average hack size to $30 million.
“The Bybit hack redefined the threat landscape,” the report stated.
“It exemplifies how digital asset theft has transcended criminal opportunism and morphed into a tool of statecraft.”
Indeed, North Korea-linked entities were responsible for an estimated $1.6 billion of the total stolen, further entrenching Pyongyang’s status as the most prolific nation-state threat actor in the crypto sphere.
Yet the menace is diversifying. On June 18, Iranian crypto exchange Nobitex was breached for over $90 million by a group reportedly linked to Israel, Gonjeshke Darande (Predatory Sparrow).
Unusually, the stolen funds were routed to unusable vanity addresses, underscoring symbolic and political motives rather than financial gain.
TRM Labs flagged this as a “disturbing shift,” with digital asset theft increasingly deployed as a weapon in asymmetric geopolitical conflict.
The report also found that more than 80 percent of losses stemmed from infrastructure breaches, including private key theft, seed phrase leaks, and front-end compromises— attacks typically ten times costlier than other vectors.
Meanwhile, DeFi exploits such as flash loan manipulations accounted for 12 percent of losses, reflecting persistent smart contract vulnerabilities despite years of scrutiny.
As digital currencies become enmeshed in global rivalries, TRM Labs warns that conventional cybersecurity approaches are now inadequate.
“Massive breaches, often tied to nation-state operations, require a new defence paradigm,” the firm asserted, urging industrywide adoption of advanced safeguards and cross-border collaboration among regulators and law enforcement.
E-Business
CAC Launches AI-powered Business Registration Portal

Corporate Affairs Commission (CAC) has inaugurated the pilot take-off of its new Artificial Intelligence (AI)-powered registration portal.
A statement issued by the commission explained that Malam Hussaini Magaji, registrar-general of the CAC, made the announcement during the 2025 Stakeholders Forum in Port Harcourt.
According to him, “the initiative is a major milestone in Nigeria’s business facilitation drive.”
The Registrar further explained that the upgraded portal marks a complete overhaul of the Company Registration Portal (CRP), saying that it comes with advanced features designed to simplify and speed up business registration.
The new system, according to him, allows for instant name reservation approvals, likening the ease to creating an email account, and stressing that the AI-powered platform could suggest available alternatives to business names and approve them immediately.
Another innovation, he stated, is the ability to register a business using only the National Identification Number (NIN) of a director or proprietor, pointing out that there is an ambitious target of completing business registration and certificate generation within 30 minutes, subject to real-time NIN validation.
E-Business
Bitget Launches Institutional Services to Empower Fintech Innovation

Bitget has launched its institutional services in Nigeria, offering fintech companies a robust platform to build innovative solutions on top of Bitget’s suite of institutional-grade offerings.
Gracy Chen, CEO, Bitget, in a statement said, “Our goal is to empower Nigerian businesses to innovate and leverage blockchain for wealth creation opportunities, hence, the institutional services empower fintech leaders with tailored solutions, as the offerings designed to cater for the unique operational needs of institutional clients, enabling businesses to embed trading functionalities like spot and futures markets, wallet management, and more, directly into their platforms.
“The Key services include White-label Broker Services which enabled Fintech companies to deploy customized crypto exchanges using Bitget’s infrastructure while managing branding and users independently. There is also API Solutions that can make the Developers to integrate trading functionality via APIs for spot, margin, and derivatives markets, ensuring fast execution and seamless experiences for end users.”
Chen added, “The ND Broker Model provides clients with complete autonomy over user-facing platforms, offering exclusive front-end flexibility while relying on Bitget for back-end market liquidity. Clients are able to employ Protection Fund and Proof of Reserves of over $600million secured in the Bitget Protection Fund and real-time Proof of Reserves, which gives clients assurance of maximum transparency and security.”
- E-Financial3 days ago
Access ARM Pensions Advocates Ways to Boost Civil Servants’ Retirement
- E-Business3 days ago
Firm Warns as Social Media Scams Put Users’ Data at Risk
- Telecom3 days ago
MTN Nigeria Launches “Mega Billion Promo” to Reward Customer Loyalty and Drive Financial Inclusion
- Telecom2 days ago
AVEVA Highlights Climate Impact Gains in 2024 Sustainability Report
- General News2 days ago
AfCFTA Opens Opportunity for Logistics Sector
- E-Business3 days ago
Nigeria Ranks 3rd in Africa for Ransomware Threats –INTERPOL
- Telecom2 days ago
ALTON Explains SIM-related Services Disruption Across Mobile Networks
- General News3 days ago
NELFund Warns Students Against Fake Loan Portal