Connect with us

General News

Top-Five Schemes Cybercriminals are Running Amid the Biggest Sport Event – Kaspersky

Published

on

Kindly share this post

The FIFA World Cup Qatar 2022 is the most awaited sports event of 2022 for football fans and kicks off on November 20. As well as exciting hundreds of millions of fans worldwide, it’s also attracted the interest of cybercriminals looking to make a fast buck.

To get a better overview of how scammers are trying to monetise football fans’ interest, Kaspersky experts have analysed World Cup-related phishing websites from around the globe designed to steal users’ identifying and banking data. Kaspersky researchers have found fake pages offering everything from tickets or event merch, to match streaming services, plus numerous giveaways and NFT scams exploiting the World Cup.

Ticketing scams
As with all major global sports events, fake tickets are the spread bait most used to lure victims and this World Cup is no exception. Additionally, Qatar 2022 is only offering digital tickets, increasing the risk of running into malicious resources. Kaspersky experts discovered numerous phishing pages offering to buy tickets for FIFA matches. Needless to say, users will lose personal data, banking details, and money. Additionally, scammers may start also using the stolen data for other purposes or sell it on the Dark Web.

Gifts
No big public event is complete without fraudsters imitating extremely generous giveaways. Kaspersky experts also found phishing pages offering to win two tickets to the World Cup. This is quite popular where usually each user becomes a ‘lucky’ winner; with the chosen ones only needing to pay a delivery fee.

Merchandise
Another way to steal users’ data is via fake FIFA-related merchandise stores. While the offer of a T-shirt of your favourite team, phone cases with popular players, or signed soccer balls sounds good, after entering your data and transferring money to make a purchase, fans lose their cash to fraudsters instead.

Crypto and NFT frauds
A distinctive feature of the threat landscape ahead of the 2022 World Cup has been the active spread of various crypto scams, mostly exploiting the popularity of NFTs. Some offer to make a bet on a match and win cryptocurrency, others to win worldwide related NFT art. All the user needs to do is to enter crypto wallet credentials, so the ‘prize’ transfers directly. In such a scenario, scammers gain access to all savings and related wallet data.

Another scheme is crypto investment fraud which is a bright example of a dubious investment. Fraudsters actively create real coins and convince a user to invest in it while promising the victim potential currency growth. In real life, such initiatives are almost never a success as users have spent money on something that will never develop.

Flights and accommodations
Pandemic imposed limitations will also see the 2022 World Cup stage many offline events with live viewers, involving thousands of tourists in Qatar – something scammers have not missed. Kaspersky experts have observed numerous phishing pages imitating airline services offering tickets to Doha. The analysed webpage shows all the classic signs of a scam – nice appearance, wrong spelling, freshly registered domain, and limited functionality of the site. Although the site mimics a global airfare aggregator, the user can only choose Qatar in the list of destination countries. Once flight details are entered, the victim is offered the chance to enter personal data along with ID and credit information.

‘Major sports events always attract the attention of cybercriminals. With this World Cup, scammers got very creative, as we have observed a variety of fraudulent schemes employed. We see how they are trying to benefit most from the situation and exploit as many trendy topics as possible, including a growing number of NFT scams related to the World Cup.

“At the same time, there are many so-called traditional scams out there from giveaways and fake tickets to merch stores. These schemes are simple, yet, effective and is why such fraudulent pages are eternal companions of big events.

“We encourage users to be attentive when they receive offers that seem too good to be true and carefully check the validity of the messages they receive,’ comments Olga Svistunova, a security expert at Kaspersky.

To avoid falling victim to a scam, Kaspersky advises users to:

  • It will be safe to check the link before clicking. Hover over it to preview the URL, and look for misspellings or other irregularities
  • It’s better not to follow links from e-mails at all. Instead, you can open a new tab or window and enter the URL of your bank or other destination manually.
  • Consider what kind of information is being requested. Legitimate companies don’t contact you out of the blue via unsolicited emails to ask you for personal information such as banking or credit card details, social security number etc. In general, unsolicited messages telling you to ‘verify account details’ or ‘update your account information’ should be treated with caution.
  • Use a reliable security solution, such as Kaspersky (http://bit.ly/3UCDzB7), that identifies malicious attachments and blocks phishing sites.
  • Grammar and spelling check is an effective way to identify a scammer. Typos and bad grammar are red flags. So too are odd phrasing or unusual syntax, which might result from the email being translated back and forth through translator several times.

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

General News

NCDC Enhances Monitoring, Releases Advisory amid Rising Global Hantavirus Cases

Published

on

Kindly share this post

Nigeria Centre for Disease Control (NCDC) has intensified nationwide disease surveillance following reports of a Hantavirus infection cluster connected to international cruise ship travel involving several countries.

NCDC Enhances Monitoring, Releases Advisory amid Rising Global Hantavirus Cases

Dr Jide Idris, director-general, NCDC, in a public health advisory, confirmed that Nigeria has not recorded any confirmed Hantavirus case and stated that the overall public health risk remains low.

According to the agency, the reported outbreak currently involves a limited number of confirmed and suspected infections linked to cruise ship exposure, while international investigations and contact tracing efforts continue.

The NCDC explained that the advisory was released to strengthen national preparedness and encourage vigilance against emerging infectious diseases amid growing global concern surrounding the outbreak.

Health authorities noted that Hantaviruses are mainly transmitted through exposure to infected rodents, their urine, saliva, droppings, or contaminated dust particles. Symptoms may include fever, fatigue, muscle pain, gastrointestinal illness, and in severe cases, respiratory complications.

The current outbreak has reportedly been associated with the Andes virus strain, which has shown limited human-to-human transmission through close contact in previous cases.

The NCDC stated that enhanced monitoring systems have been activated nationwide to support early detection and rapid response efforts.

The agency also urged Nigerians to maintain proper hygiene, prevent rodent infestations, safely store food items, and avoid exposure to rodents and contaminated environments.

Officials further advised the public to rely only on verified information from recognized health authorities and avoid spreading misinformation regarding the outbreak.

 

 


Kindly share this post
Continue Reading

General News

Moniepoint Partners GDG Lagos, Women Techmakers to Empower the Next Generation of Women Architects in Tech

Published

on

Kindly share this post

In a critical move to bolster talent density and accelerate Nigeria’s digital economy, Africa’s all in one financial ecosystem, Moniepoint hosted an International Women’s Day event bringing together women in technology for a day of leadership development and hands-on product building.

Held at Moniepoint’ Headquarters in Lagos, themed “Break the Pattern,” the event was organised in partnership with Women Techmakers Lagos and Google Developer Group (GDG) Lagos with participants spanning both technical and non-technical backgrounds, reflecting the breadth of women currently active across Nigeria’s digital economy.

In a keynote address delivered by Kemi Nwogu, Head of Product at Moniepoint Inc, titled “Breaking the Pattern: How Women Can Redefine the Future of Tech,” she made the case that progress for women in technology requires not just access to existing structures, but the tools and confidence to reshape them. Furthermore, Nwogu issued a bold call to action, urging attendees to move beyond traditional career playbooks and take ownership of shaping the industry’s future.

“From a young age, many girls have been subtly discouraged from pursuing science and tech. They are told sometimes directly, sometimes indirectly, that tech is too hard, too technical, or simply not for them. These patterns are not facts, they are constructs. And what has been constructed can be deconstructed! The future of tech needs leaders who build people, not just products, cultures, not just systems,”said Nwogu.

On building skills with purpose, she urged women to “show up everyday, make small, steady progress with online courses, coding bootcamps, open-source projects while leveraging the full ecosystem; take on challenging tasks as your greatest classroom using real problems to build real skills; while knowing why you’re building a skill as every learning goal can be tied to a career journey.”

This thematic fare of the event was further explored in a panel discussion, “Unscripted: Leading Beyond the Patterns We Inherited”, moderated by Atinuke Oluwabamikemi Kayode and featuring leaders from fintech, creative design, and software engineering space, including Chukwu Adaeze (Creative Director, CAV Digital), Chinenye Ogbu (Customer Experience Lead, Hydrogen), and Motunrayo Koyejo (Senior Software Engineer, Cowrywise).

The robust and extensive conversation examined the professional archetypes that have historically defined leadership in the Nigerian tech ecosystem: the engineering culture that equates output with exhaustion, the creative industry’s tendency toward top-down authority, the script-driven rigidity of customer-facing roles. The panelists also provided deep insights into how they had navigated and, in places, dismantled those patterns within their teams and organizations.

The event went beyond conversations to a hands-on workshop, Prompt to Production, facilitated by Taiwo Famakinde which guided attendees through modern product development from prompt design through rapid prototyping to the deployment of a functional application using AI tools.

A lot of the participants entered with little to no prior experience building software products. The workshop then fed directly into a Buildathon, where participants developed and deployed their own solutions in real time, with the strongest builds recognised and rewarded at the closing ceremony.

“IWD celebrations are often heavy on inspiration, but we wanted to offer something more, a proof of capability. Oftentimes, there is a gap between having ideas and actually building them, and we set out to bridge that by creating a space where women could easily deploy their ideas into live products with AI in just a few hours. By the end of the day, something that once felt complex due to the fast pace of AI started to feel possible.

“Our participants left with both the technical confidence to build and the leadership frameworks to navigate their careers on their own terms, ensuring they are no longer just participants in the tech ecosystem, but the architects of its future. They are now ready to test their ideas and lead without waiting for perfect conditions or a full team.” said Funke Olasupo, Co-organizer, Women Techmakers Lagos.

Interestingly, the “Break the Pattern” event sits within a broader investment in Nigeria’s technology talent pipeline that Moniepoint has deployed over the years. As one of Nigeria’s most significant fintech employers, the company runs a critical engine that sustains Nigeria’s formal and informal economy.

Moniepoint has invested in developer community partnerships including its ongoing collaboration with GDG Lagos as well as internal programmes designed to build engineering depth across product domains that include its highly successful Women in Tech initiative, DreamDevs, HatchDev and the government’s acclaimed 3MTT programme.

 


Kindly share this post
Continue Reading

General News

Google Disrupts AI-Driven Cyberattack, Warns of Emerging Security Risks

Published

on

Kindly share this post

Google says it has disrupted an attempt by a criminal group to use artificial intelligence (AI) to exploit a previously unknown software vulnerability, highlighting growing concerns over the use of AI in cybercrime.

Google Disrupts AI-Driven Cyberattack, Warns of Emerging Security Risks

Google

The technology company disclosed this on Monday, saying the hackers planned to exploit a “zero-day” vulnerability in an unnamed company’s digital system before the attack was intercepted.

A zero-day vulnerability refers to a software flaw unknown to the vendor or security teams, leaving no time to develop a protective fix before exploitation.

John Hultquist, Chief Analyst at Google’s threat intelligence arm, described the incident as a significant shift in cybersecurity threats.

“It’s here. The era of AI-driven vulnerability and exploitation is already here,” Hultquist said.

According to Google, the attackers intended to exploit a security flaw that would have allowed them to bypass two-factor authentication and gain access to a widely used online system administration tool.

The company said it had notified the affected firm and relevant law enforcement agencies, successfully disrupting the operation before any damage occurred.

Google, however, declined to identify the targeted company, the threat actors involved, or the AI model used in the attempted breach.

The firm said preliminary analysis suggests the hackers used a large language model, similar to those powering popular AI chatbots, to identify the vulnerability.

Google noted there was no evidence linking the attempted attack to any government-backed operation, although groups connected to China and North Korea have reportedly explored similar AI-enabled cyber techniques.

The disclosure comes amid growing debate over the regulation of increasingly advanced AI systems capable of coding, vulnerability discovery, and cybersecurity analysis.

Recent advancements in AI hacking tools, including Anthropic’s newly announced cybersecurity-focused model, Mythos, have intensified concerns among governments and technology firms worldwide.

The U.S. government has also stepped up oversight of advanced AI systems, with the Commerce Department recently announcing agreements with major technology firms, including Google, Microsoft, and xAI, to evaluate powerful AI models before public release.

Industry analysts warn that while AI could strengthen cybersecurity by helping organisations detect and patch software flaws faster, it could also accelerate cyber threats by enabling criminals to discover and weaponise vulnerabilities at unprecedented speed.

Dean Ball, Senior Fellow at the Foundation for American Innovation, said governments may need to consider stronger oversight of advanced AI tools.

“I don’t like regulation. I would prefer for things not to be regulated. But I think we need to in this case,” Ball said.

Experts say the growing use of AI in cybersecurity could create a transitional period of heightened digital risk before stronger defences are developed globally.


Kindly share this post
Continue Reading

Trending