Connect with us

Telecom

Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.

Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.

“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.

 “Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.

“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”

Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:

Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.

Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.

Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.

Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.

Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.

Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.

Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.

“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”

Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.

Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.

 

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Why Econet Wireless is Switching to VFEX

Published

on

Kindly share this post

After nearly 30 years on the Zimbabwe Stock Exchange (ZSE), Econet Wireless, the country’s biggest technology company, is preparing to leave the bourse and move its property and infrastructure assets to the US dollar-based Victoria Falls Stock Exchange (VFEX).

Why Econet Wireless is Switching to VFEX

Econet plans to spin off its towers, property and power installations into a new company, Econet InfraCo, which will be listed on the VFEX. Its mobile network operator business will be delisted from the ZSE.

Econet believes the market has failed to properly value its business and its assets. At the time Econet first released a cautionary on December 3, its market capitalisation was the equivalent of US$628 million.

A rally over the past days has lifted it to a market capitalisation – the number of shares times the share price – to around US$1 billion.

“For the last several years, the company has traded at a significant discount to its peers across Africa which trade at 6 – 8x EV/EBITDA.

“These peers have all already separated and realised value from their tower infrastructure whereas the company still owns its tower and other passive infrastructure which the company has now housed under a separate infrastructure company to be listed on the Victoria Falls Stock Exchange,” Econet said.

Econet will keep 70% of Econet InfraCo, with up to 30% used to settle an offer to shareholders who do not wish to remain invested.

The company argues that infrastructure assets are better suited to the VFEX, which trades in US dollars and attracts investors familiar with property and long-term infrastructure.

“Unlike the mobile network operator business in Zimbabwe, infrastructure assets represent a different class of investment, one that is better understood and valued within USD-based property and infrastructure markets.

“This is demonstrated by the higher Price-to-Earnings multiples at which listed real estate and infrastructure companies trade on the VFEX,” the company said.

Econet dominates Zimbabwe’s mobile market, with 88% of voice traffic, 82% of data usage and 73% of all subscribers. It has built the largest portfolio of telecoms assets.

By the end of the second quarter, it had 234 5G sites, 1,700 LTE sites, 1,900 3G towers and 2,860 2G locations.

In the half-year to August alone, it added 27 new 2G–4G sites and 100 new 5G sites.

In addition to these locations, Econet also holds other properties and power assets, including solar installations, Tesla batteries and generators.

The move follows a well-established trend in Africa.

MTN and Airtel Africa sold towers in Nigeria, Ghana, Uganda and Kenya to independent operators like IHS Towers and Helios Towers. Vodacom, Orange and Telkom South Africa have also carved out tower units through sale-and-leaseback deals.

Credit: Newsday


Kindly share this post
Continue Reading

Telecom

Qualcomm Completes Third Edition of Make in Africa Startup Mentorship Program

Published

on

Kindly share this post

Qualcomm Technologies Inc. has announced the successful completion of its third annual Make in Africa (QMIA) Startup Mentorship Program, marked by the virtual Make in Africa Finale 2025. The initiative underscores Qualcomm’s long-term commitment to fostering Africa’s vibrant innovation ecosystem through the broader Qualcomm Africa Innovation Platform.

Highlights:

  • The 2025 Qualcomm Make in Africa program supported ten innovative startups from Kenya, Tunisia, Nigeria, Benin and Senegal, each addressing local challenges by developing tech-enabled solutions across critical sectors such as healthcare, sustainable agriculture, climate resilience and mobility.
  • This year, the program attracted more than 400 applications from 19 countries, showcasing remarkable talent across the continent.
  • Farmer Lifeline, of Kenya, was announced as the 2025 Wireless Reach Social Impact Fund winner, recognizing its impactful use of wireless technology.
  • Applications for Qualcomm Make in Africa 2026 are now open. Applicants can visit the Qualcomm website to apply.

As a flagship initiative of Qualcomm, the equity-free program shines a spotlight on the creativity and drive of African founders leveraging advanced technologies such as AI, 4G/5G, robotics, connectivity and IoT to address pressing real-world challenges.

Now in its third year, the program remains steadfast in its mission to accelerate early-stage technology startups by providing tailored mentorship, targeted business coaching, expert engineering consultation and comprehensive intellectual property protection guidance – exemplified by resources such as Qualcomm’s L2Pro Africa training. This holistic support empowers founders to transform their visionary ideas into sustainable, market-ready solutions.

“This year’s cohort has demonstrated incredible ingenuity, transforming complex challenges into scalable, tech-driven solutions that will drive social and economic impact across the continent,” said Elizabeth Migwalla, Vice President International Government Affairs, Qualcomm Incorporated.

“Innovation is the driving force behind Africa’s future, and this year’s startups are a brilliant demonstration of that. The African Telecommunications Union (ATU) is proud to partner with Qualcomm for the Make in Africa 2025 program,” said John Omo, Secretary General of the ATU. “We are working to harmonize spectrum management policies, regional standards, and open data practices, but we know that true progress relies on large-scale support. That’s why we call on governments, universities, investors, and industry to support these initiatives – and any endeavor that places African ingenuity at the forefront.”

The 2025 cohort includes the following groundbreaking startups:

  • Aframend (Nigeria): Uses AI to explore African medicinal plants for new drug discovery and aims to turn local remedies into safe, affordable treatments for diseases.
  • AmalXR (Tunisia): Offers AI-powered virtual rehabilitation sessions on everyday devices, enabling easy patient and clinician progress tracking.
  • Archeos (Benin): Automates fish farming with solar-powered sensors and feeders, providing real-time data on water quality and feeding levels for improved fish health.
  • ClimatrixAI (Nigeria): Installs connected weather and flood stations with an AI platform to forecast street-by-street risk, enhancing early warnings and disaster response for local communities.
  • Ecobees (Tunisia): Builds smart hive monitors and a digital platform for real-time insights into beehive-health, to protect bees and crops that depend on them.
  • Edulytics (Senegal): Applies AI on handheld ultrasound devices for early detection of liver disease, aiming to make this special screening widely accessible.
  • Farmer Lifeline (Kenya): Deploys small, solar-powered devices that scan fields for pests and diseases and send alerts straight to farmers’ phones to protect crops.
  • Pollen Patrollers (Kenya): A women-led agritech startup using connected hive technology and AI to keep bee colonies healthy.
  • Solar Freeze (Kenya): Provides solar-powered cold rooms with remote monitoring enabling farmers to keep fruits and vegetables fresh and increase earnings.
  • Pixii Motors (Tunisia): Designs electric scooters with smart batteries that can be swapped in and out at local stations, aiming to revolutionize urban mobility.

Wireless Reach Social Impact Fund Winner 

Kenyan innovator, Farmer Lifeline, was announced as the winner of the 2025 Wireless Reach Social Impact Fund. The fund, sponsored by Qualcomm® Wireless Reach™ Initiative, champions the innovative use of wireless connectivity to address pressing community. As the winner, Farmer Lifeline will receive dedicated funding and tailored technical support to scale its groundbreaking solution.

“Farmer Lifeline stood out with its innovative small solar-powered devices that scan fields to detect pests and diseases. This technology enables local farmers to effectively protect their crops, significantly increase yields, and improve food security”, stated Erica Ciaraldi, Vice President, Wireless Reach, Qualcomm Incorporated.

“Their visionary approach and dedication to agricultural resilience have positioned them as leaders in their field. They are driving meaningful change for smallholder farmers and inspiring others across the continent. This fund will empower them to scale their impact further, enabling broader reach and deeper influence across Africa and the world.”

In recognition of the groundbreaking innovations demonstrated by all finalists, each will receive stipends designed to accelerate their growth, support strategic development and safeguard their intellectual property. This comprehensive support underscores Qualcomm’s commitment to fostering innovation and ensuring these visionary projects can thrive sustainably.

Looking ahead: Launch of Qualcomm Make in Africa Startup Mentorship Program 2026

Building on the significant success of previous years, Qualcomm is excited to launch the fourth year of the program in 2026.

Applications for the 2026 Qualcomm Make in Africa cohort can be found at the Qualcomm website.


Kindly share this post
Continue Reading

Telecom

Fynd Expands Global Footprint, Adds Africa With Surtee Group Partnership

Published

on

Kindly share this post

Fynd, an AI-native retail technology platform backed by Reliance Retail Ventures Limited, today announced its official expansion into South Africa, onboarding Surtee Group – one of the region’s most established luxury and fashion retailers – as its first strategic customer in the market. This milestone marks a pivotal moment for African retail, as legacy brands begin embracing digital transformation to meet the demands of a rapidly evolving consumer landscape.

Fynd Expands Global Footprint, Adds Africa With Surtee Group Partnership

Fynd

Fynd’s entry into Africa reflects its commitment to enabling digital transformation in high-growth retail markets worldwide. The move also comes at a turning point when South Africa’s e-commerce sector is projected to exceed R130 billion ($7.48 billion) in 2025, capturing nearly 10% of total retail sales – a fourfold increase since 2020.

According to Statista, South Africa is expected to have 11.7 million e-commerce users in 2025, with projections reaching 21.5 million by 2029. This growth is being driven by rising internet penetration, mobile-first shopping behaviour, and increasing trust in digital platforms. To meet rising consumer expectations, businesses are investing in AI and unified commerce platforms. Fynd’s scalable, AI-native stack is built to support this shift, enabling agility, personalisation, and operational efficiency.

“South Africa’s retail landscape is evolving fast,” said Ronak Modi, Chief Business Officer – Global at Fynd. “Consumers expect seamless, personalised experiences across every channel, and retailers need agile, intelligent infrastructure to keep up. Our platform is built to unify disconnected systems, speed up fulfilment, and elevate customer engagement; all without adding operational complexity.”

“South Africa is an exciting addition to our global footprint. The market is digitally ambitious, brand-forward, and ready for intelligent commerce infrastructure. Our goal is to help local retailers unify siloed systems, personalise engagement, and accelerate fulfilment without adding complexity.”

Surtee Group operates 94 boutiques and 2 e-commerce sites, comprising the multi-branded stores Levisons and the mono-brand boutiques, namely, Giorgio Armani, Michael Kors, Lacoste, Hugo Boss, VERSACE, TOD’S, Salvatore Ferragamo, Versace Jeans Couture, Emporio Armani, Burberry, Jimmy Choo, Luminance, Paul Smith, Coach, and Armani Exchange. They will implement Fynd’s unified commerce stack, including Storefronts, Order Management System (OMS), Warehouse Management System (WMS), and Clienteling tools to connect in-store and online operations, streamline inventory visibility, and launch brand-specific ecommerce storefronts across its brand portfolio.

While online retail continues to surge, offline sales still represent the vast majority of revenue for retailers in the country. Fynd will enable Surtee Group to unify its offline inventory online, power ship-from-store capabilities, and improve both margins and sell-throughs. Additionally, products like Clienteling will empower in-store teams to engage customers better and drive incremental sales through personalised recommendations and seamless omnichannel experiences.

Fynd’s entry into the market is designed to meet this demand. Its AI-native platform enables real-time stock visibility, ship-from-store capabilities, dark store orchestration, and intelligent customer engagement all within a single scalable solution.

As part of its digital transformation roadmap, Surtee Group aims to consolidate its leadership in luxury and fashion retail while expanding into e-commerce and improving omnichannel agility.

“We were looking for a partner who understood both the technical and strategic dimensions of unified commerce,” said a Surtee Group spokesperson. “Fynd stood out for their proven scalability, consultative approach, and deep experience with global fashion brands, many of which align with our portfolio. Their unified stack enables us to modernise operations while building a connected, brand-first customer experience.”

Fynd has already scaled across India, the GCC, and Southeast Asia, and now adds Africa to its regional presence. With Surtee Group leading the transformation, Fynd is positioned to play a key role in powering unified commerce adoption across South Africa’s growing digital economy.


Kindly share this post
Continue Reading

Trending