E-Business
Why Even the Most Experienced can Fall Victim of AI Phishing Attacks
The evolution of AI is not only affecting various industries, but it has also transformed cybercriminals’ tactics. One alarming trend is the use of AI to enhance phishing scams, refining them, targeting specific individuals, and making these attacks almost impossible to recognise.
Kaspersky reviews how AI is changing phishing techniques and why even the most cyber-aware employees may fall for these scams.
According to a recent Kaspersky study, the number of cyberattacks experienced by organisations in the last 12-months is reported to have increased by nearly half (48%) in the Middle East, Turkiye and Africa (META) region.
The most ubiquitous threat came from phishing attacks, with 51% of those questioned in the META region reporting this type of incident. With AI becoming a more prevalent enabler for cybercriminals, over half of the respondents in META (53%) anticipate significant growth in the number of phishing attacks. In this text, Kaspersky examine how AI is used in phishing and why experience alone is sometimes not enough to avoid becoming a victim.
Personalisation through AI
Previously, phishing attacks relied on a generic mass message sent to thousands, hoping some of the recipients would fall for the bait. AI has changed this into scripting highly personalised phishing emails in large numbers. Using publicly available information like that on social media, job boards, and companies’ websites, these AI-powered tools can generate emails tailored to an individual’s role, interests, and communication style.
For example, a CFO might receive a fraudulent email that mirrors the tone and formatting of their CEO’s messages, including accurate references to recent company events. This level of customisation makes it exceptionally challenging for employees to distinguish between legitimate and malicious communications.
Deepfake technology
AI has also introduced deepfakes into the phishing arsenal. These are increasingly being leveraged by cybercriminals to create fake but highly accurate audio and video messages, crafted to reflect the voice and appearance of the executives they seek to impersonate.
For example, in one reported case, attackers used a deepfake to impersonate multiple members of staff during a video conference, convincing the employee to transfer approximately $25.6 million. As deepfake technology continues to advance, it is expected that such attacks will become more frequent and harder to detect.
Bypassing traditional defenses
Cybercriminals can manipulate the script of traditional e-mail filtering systems with the use of AI. By analysing and mimicking legitimate email patterns, AI-generated phishing emails can bypass security software detection. Machine learning algorithms can test and refine phishing campaigns in real time, enhancing their success rates and making them increasingly sophisticated.
Why experience is not enough
Even experienced employees are falling victim to these advanced phishing attacks. The level of realism and personalisation that AI can achieve may override the skepticism that keeps experienced professionals cautious. Moreover, AI-generated attacks often exploit human psychology, such as urgency, fear, or authority, pressuring employees into acting without double-checking the authenticity of the request.
Combatting AI-hyped phishing
To defend against AI-driven phishing attacks, organisations must adopt a proactive and multi-layered approach that emphasises comprehensive cybersecurity. Regular, up-to-date AI-focused cybersecurity awareness training is critical for employees, helping them identify the subtle signs of phishing and other malicious tactics.
Kaspersky Automated Security Awareness Platform can help with such training. Alongside this, businesses should implement robust security tools, such as Kaspersky Next and Kaspersky Security for Mail Server, capable of detecting anomalies in emails, such as unusual writing patterns or suspicious metadata.
A zero-trust security model also plays a vital role in minimising the potential damage of a successful attack. By restricting access to sensitive data and systems, this approach ensures that even if attackers breach one layer of security, they cannot compromise the entire network. Together, these measures create a comprehensive defense strategy, combining advanced technology with vigilant human oversight.
Nigerian government, through the Office of the National Security Adviser (ONSA) and the National Information Technology Development Agency (NITDA), has announced a strategic collaboration to strengthen cybersecurity and clean up the nation’s cyberspace.
Recognizing that cybercrime knows no borders, Nigeria also reaffirmed its commitment to fostering stronger global partnerships within the cybersecurity ecosystem.
This announcement was made during a press conference before the inaugural National Cybersecurity Conference, which is scheduled to take place in Abuja from July 9th to 11th, 2025.
Sa’ad Abubakar, national cybersecurity coordinator from the Office of National Security Advisor, said fighting cybercrime must take the whole of society and the whole of the government approach.
According to him, “Apart from the deterrent approach whereby government agencies such as Economic and Financial Crimes Commission (EFCC) arrest individuals, take them to court and prosecute them, the youth can be nurtured into better citizens who can showcase their capacity in better ways and be useful to the country.”
Similarly, Kashifu Abdullahi, director-general, NITDA, also stressed the need for collaborative efforts in fighting cybercrimes.
According to him “Then, in addition to that, we also want to build a stronger global collaboration with the global cyber security ecosystem, because when you look at cybercrime in general, it doesn’t respect the borders.
“Someone can commit a crime from Ghana using a Nigerian ID in the US. So you can look at him physically in a different jurisdiction, pretending to be in another jurisdiction, committing the crime in another jurisdiction.
“So without that kind of synergy and working together, it will be difficult to address these challenges. The third one is challenge. The third one is getting an alternative to cybercrime for our kids in Nigeria. We have this as a major challenge.”
Inuwa further highlighted the upcoming conference’s importance, noting that it would tackle key issues through workshops, discussions on emerging threats, cross-border cybersecurity collaboration strategies, and training programmes.
He also announced that the National Cybersecurity Conference 2025 would feature the Cybersecurity Excellence Awards, recognising top contributions in the field.
The DG extended an invitation to global partners to collaborate with Nigeria in building a safer digital future.
The press conference was attended by notable figures, including Ahmad Sa’ad Abubakar, National Coordinator of, the National Cybersecurity Coordination Centre (NCCC); Hanniel Jafar, Representative of the President, of Cyber Security Experts Association of Nigeria (CSEAN); Ankit Shukla, Managing Director, QNA Marketing Management LLC and members of the press and other stakeholders.
XIAN Telecom has acquired an 8% stake in pan-African e-commerce company Jumia Technologies, citing the platform’s fintech and logistics strengths as key drivers of its backing.
This marks the first major telecom investment in Jumia since MTN Group’s exit in 2020.
AXIAN, a fast-growing telecom and digital services provider with operations across Africa, disclosed the purchase in a Schedule 13D filing with the U.S. Securities and Exchange Commission.
While the financial terms were not disclosed, AXIAN Telecom CEO, Hassan Jaber, described the move as a strategic alignment with Jumia’s growth trajectory and digital ecosystem.
“Jumia’s achievements in digital retail and fintech, particularly through JumiaPay and its logistics network, make it a very attractive investment for us. We believe in Jumia’s potential to promote financial and economic inclusion, which aligns with our core values,” said Jaber.
Once dubbed the “Amazon of Africa,” Jumia became the first African-founded tech company to list on the New York Stock Exchange in 2019.
But years of underperformance, leadership changes, and competitive pressures dented investor confidence.
In October 2020, South Africa’s MTN Group offloaded its 18.9% stake for $138 million, well below the $698 million value it once held post-IPO.
Since then, Jumia has undergone a significant transformation. Under CEO Francis Dufay, appointed in 2022, the company exited low-performing markets like South Africa and Tunisia, cut costs, and doubled down on core markets – Nigeria, Kenya, Egypt, and Morocco.
The firm is now focused on high-growth verticals, including everyday essentials and digital financial services.
Jumia’s regional CEO for East Africa, Vinod Goel, recently revealed plans to scale up international brand offerings and open its logistics network to third-party businesses.
Jaber underscored that AXIAN Telecom’s investment signals renewed confidence in Jumia’s long-term potential.
The telecom firm’s CEO said the company views Jumia as a key player in advancing Africa’s digital economy, aligning with AXIAN’s mission through its fintech and digital infrastructure brands such as Yas and Mixx by Yas.
Abisoye Coker-Odusote, director general, National Identity management commission (NIMC) has said that the commission is set to register 95 percent of Nigerians into the National Identity Database before December 2025.
Abisoye Coker-Odusote,, DG, NIMC
She made this statement at a press briefing to highlight the commissions goal aligns with President Bola Tinubu’s Renewed Hope Agenda, particularly on digital governance and inclusive development.
The mass enrollment drive will be powered by a combination of improved infrastructure, expanded registration centres, and robust public sensitization campaigns.
As of May 2025, NIMC reports over 120 million Nigerians have been enrolled, and about 100 million more would be captured by December.
Nigeria Strengthens Cybersecurity, Launches National Cleanup Plan
ARCON to Crackdown on AI-Generated Fake Ads
UBA Compiles with NCC, to Deduct USSD from Customers’ Accounts
Microsoft Sacks 300 Staff as Job Cut Hits 6,300
FG, UNICEF Partner to Train 20m Youths on Digital Skills
E-Business2 days agoFarmers to Get Identity Card for Loans, Inputs
Telecom2 days agoARCON Probes 9mobile over Alleged N1Bn Advertising Debt
News2 days agoSERAP Sues NNPC over Alleged Missing ₦500Bn, Seeks Accountability
News1 day agoJAMB Waxes Worriedly over Rising Digital Exam Fraud
E-Business1 day agoNIMC Plans to Register 95 Percent Nigerians by December
E-Business2 days agoDyna.Ai Launches Operations in Nigeria
News2 days agoFirst Asset Management Receives 2024 Fund Manager Award
Telecom1 day ago9mobile Nigeria Inks Agreement to Roam with MTN