Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

E-Business

Why Even the Most Experienced can Fall Victim of AI Phishing Attacks

Published

on

Kindly share this post

The evolution of AI is not only affecting various industries, but it has also transformed cybercriminals’ tactics. One alarming trend is the use of AI to enhance phishing scams, refining them, targeting specific individuals, and making these attacks almost impossible to recognise.

Kaspersky reviews how AI is changing phishing techniques and why even the most cyber-aware employees may fall for these scams.

According to a recent Kaspersky study, the number of cyberattacks experienced by organisations in the last 12-months is reported to have increased by nearly half (48%) in the Middle East, Turkiye and Africa (META) region.

The most ubiquitous threat came from phishing attacks, with 51% of those questioned in the META region reporting this type of incident. With AI becoming a more prevalent enabler for cybercriminals, over half of the respondents in META (53%) anticipate significant growth in the number of phishing attacks. In this text, Kaspersky examine how AI is used in phishing and why experience alone is sometimes not enough to avoid becoming a victim.

Personalisation through AI

Previously, phishing attacks relied on a generic mass message sent to thousands, hoping some of the recipients would fall for the bait. AI has changed this into scripting highly personalised phishing emails in large numbers. Using publicly available information like that on social media, job boards, and companies’ websites, these AI-powered tools can generate emails tailored to an individual’s role, interests, and communication style.

For example, a CFO might receive a fraudulent email that mirrors the tone and formatting of their CEO’s messages, including accurate references to recent company events. This level of customisation makes it exceptionally challenging for employees to distinguish between legitimate and malicious communications.

Deepfake technology

AI has also introduced deepfakes into the phishing arsenal. These are increasingly being leveraged by cybercriminals to create fake but highly accurate audio and video messages, crafted to reflect the voice and appearance of the executives they seek to impersonate.

For example, in one reported case, attackers used a deepfake to impersonate multiple members of staff during a video conference, convincing the employee to transfer approximately $25.6 million. As deepfake technology continues to advance, it is expected that such attacks will become more frequent and harder to detect.

Bypassing traditional defenses

Cybercriminals can manipulate the script of traditional e-mail filtering systems with the use of AI. By analysing and mimicking legitimate email patterns, AI-generated phishing emails can bypass security software detection. Machine learning algorithms can test and refine phishing campaigns in real time, enhancing their success rates and making them increasingly sophisticated.

Why experience is not enough

Even experienced employees are falling victim to these advanced phishing attacks. The level of realism and personalisation that AI can achieve may override the skepticism that keeps experienced professionals cautious. Moreover, AI-generated attacks often exploit human psychology, such as urgency, fear, or authority, pressuring employees into acting without double-checking the authenticity of the request.

Combatting AI-hyped phishing

To defend against AI-driven phishing attacks, organisations must adopt a proactive and multi-layered approach that emphasises comprehensive cybersecurity. Regular, up-to-date AI-focused cybersecurity awareness training is critical for employees, helping them identify the subtle signs of phishing and other malicious tactics.

Kaspersky Automated Security Awareness Platform can help with such training. Alongside this, businesses should implement robust security tools, such as Kaspersky Next and Kaspersky Security for Mail Server, capable of detecting anomalies in emails, such as unusual writing patterns or suspicious metadata.

A zero-trust security model also plays a vital role in minimising the potential damage of a successful attack. By restricting access to sensitive data and systems, this approach ensures that even if attackers breach one layer of security, they cannot compromise the entire network. Together, these measures create a comprehensive defense strategy, combining advanced technology with vigilant human oversight.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

FG Launches Online Citizenship, Business Management Platform

Published

on

Kindly share this post

Ministry of Interior has announced the launch of a new Online Citizenship and Business Management Platform in line with the Renewed Hope Agenda of President Bola Tinubu.

FG Launches Online Citizenship, Business Management Platform

A statement signed by Dr Magdalene Ajani, permanent secretary, Ministry of Interior’s said the initiative forms a key part of its ongoing reforms aimed at promoting transparency, enhancing operational efficiency, and significantly improving service delivery to the public.

The new digital platform is designed to streamline the application and processing of citizenship and business-related services, ensuring faster turnaround times and improved user experience.

The platform allows users to apply for and manage business permits, ensuring that both local and foreign businesses operate legally in Nigeria.

It includes an Expatriate Quota System to manage work permits for foreign employees, helping companies hire skilled workers while complying with Nigeria’s immigration laws.

The Citizenship Administration and Management System provides a streamlined online process for applying, tracking, and managing Nigerian citizenship applications and related services.

Members of the public, corporate entities, and other stakeholders are expected to access the platform through the ministry’s website: https://interior.gov.ng , Direct Portal Access: https://candb.interior.gov.ng , or contact candb-support@interior.gov.ng for support and inquiries.

“The Ministry of Interior remains committed to establishing a more efficient, transparent, and secure framework for citizenship administration, while continuously enhancing service delivery through digital transformation,” the statement read in part.

 

 

 

 

 

 


Kindly share this post
Continue Reading

E-Business

NITDA, CISCO Empower Youth with Digital Skills

Published

on

Kindly share this post

Fifty selected young unemployed Nigerians have completed a four-week intensive digital skills bootcamp under the Digital Literacy for All (DL4ALL) initiative, gaining practical training in Data Science, Artificial Intelligence (AI), and IT Essentials.

The programme, a collaborative effort between the National Information Technology Development Agency (NITDA) and Cisco, was hosted at NITDA’s South West Zonal Office in Victoria Island, Lagos.

Speaking on behalf of the Director General of NITDA, Kashifu Inuwa , the Head of the South West Zonal Office, Mrs. Chioma Okee-Agugwo, described the initiative as a vital component of Nigeria’s digital future. “This is not just a closing ceremony. It is the launchpad for new journeys—anchored in digital knowledge and powered by innovation,” she remarked.

According to the Director General, the initiative is rooted in NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0) and reflects key focus areas including Digital Literacy, Emerging Technologies, and Youth Empowerment. It also aligns with President Bola Ahmed Tinubu’s Renewed Hope Agenda, which seeks to accelerate economic diversification through digitisation, innovation, and skills development.

Inuwa noted that the DL4ALL initiative forms part of Nigeria’s broader commitment to digital inclusion—ensuring that no one is left behind in the evolving digital economy. It also supports the ambitious goal of achieving 70% digital literacy by 2027, championed by the Honourable Minister of Communications, Innovation and Digital Economy, Dr. Bosun Tijani. This national vision aims to equip millions of Nigerians with the skills required to thrive in a tech-driven world.

He further emphasized the importance of empowering youth with globally relevant skills. “They are no longer just consumers of technology. They are creators, innovators, and future employers,” he said.

The NITDA boss explained that throughout the bootcamp, participants engaged in hands-on learning experiences designed to build both technical proficiency and digital leadership capabilities.

“This is only the beginning,” he stated. “Through our zonal strategy, we are bringing innovation closer to local communities. This is how we democratise access and unlock Nigeria’s full digital potential.”

Inuwa expressed appreciation to Cisco for delivering high-impact training and called on stakeholders to continue investing in partnerships, people, and platforms that drive digital inclusion.

He asserted that the newly certified participants are now equipped to contribute meaningfully to Nigeria’s digital economy—armed with the skills to build solutions, secure infrastructure, and launch tech ventures that solve real-world problems.

At the end of the bootcamp, participants demonstrated their knowledge through impressive presentations that showcased the integration of skills acquired across Data Science, AI, and IT Essentials. Many spoke passionately about how the programme had expanded their technical competence and sparked a drive to create job opportunities—not only for themselves but also for others—as entrepreneurs and digital solution providers in their communities.


Kindly share this post
Continue Reading

E-Business

Cyberattack Could Cost it Up to $400m – Coinbase

Published

on

Kindly share this post

Coinbase forecast a hit of between $180m and $400m from a cyberattack that breached account data of a “small subset” of its customers, the crypto exchange said in a regulatory filing on Thursday.

Cyberattack Could Cost it Up to $400m - Coinbase

The company received an anonymous email on May 11, claiming to have information about certain customer accounts as well as internal documents.

While some data — including names, addresses and emails — was stolen, the hackers did not get access to login credentials or passwords, Coinbase said.

Still, it will reimburse customers who were tricked into sending funds to the attackers.

Hackers had paid multiple contractors and employees working in support roles outside the US to collect information.

The company has fired those involved, it said.

Separately, the New York Times reported that the US Securities and Exchange Commission (SEC) was investigating whether the company had misstated its user numbers.

Coinbase shares extended losses after the report and were last down 6.5%.

“This is a hold-over investigation from the prior administration about a metric we stopped reporting two-and-a-half years ago, which was fully disclosed to the public,” said Paul Grewal, Coinbase’s chief legal officer.

“While we strongly believe this investigation should not continue, we remain committed to working with the SEC to bring this matter to a close.”

The SEC declined to comment.

The latest developments come days before the company is set to join the benchmark S&P 500 index, casting a shadow over what was expected to be a landmark moment for the crypto industry.

Security remains a challenge for the crypto industry despite its growing mainstream acceptance.

In February, Bybit disclosed a hack in which about $1.5bn worth of digital tokens were stolen — widely described the biggest crypto heist ever.

“The cyberattack may push the industry to adopt stricter employee vetting and introduce some reputational risks,” said Bo Pei, an analyst at US Tiger Securities.

Funds stolen by hacking crypto platforms amounted to $2.2bn in 2024, according to a report from Chainalysis, a US-based blockchain analysis firm.

“As our nascent industry grows rapidly, it draws the eye of bad actors, who are becoming increasingly sophisticated in the scope of their attacks,” said Nick Jones, founder of crypto firm Zumo.

Coinbase has refused to pay a ransom of $20m demanded by the attackers and is working with law enforcement agencies. Instead it has established a $20m reward for information on the hackers.

The company is also opening a new support hub in the US and taking other measures to prevent such cyberattacks, it said.

 

 

 


Kindly share this post
Continue Reading

Trending