Connect with us

E-Business

Why Even the Most Experienced can Fall Victim of AI Phishing Attacks

Published

on

Kindly share this post

The evolution of AI is not only affecting various industries, but it has also transformed cybercriminals’ tactics. One alarming trend is the use of AI to enhance phishing scams, refining them, targeting specific individuals, and making these attacks almost impossible to recognise.

Kaspersky reviews how AI is changing phishing techniques and why even the most cyber-aware employees may fall for these scams.

According to a recent Kaspersky study, the number of cyberattacks experienced by organisations in the last 12-months is reported to have increased by nearly half (48%) in the Middle East, Turkiye and Africa (META) region.

The most ubiquitous threat came from phishing attacks, with 51% of those questioned in the META region reporting this type of incident. With AI becoming a more prevalent enabler for cybercriminals, over half of the respondents in META (53%) anticipate significant growth in the number of phishing attacks. In this text, Kaspersky examine how AI is used in phishing and why experience alone is sometimes not enough to avoid becoming a victim.

Personalisation through AI

Previously, phishing attacks relied on a generic mass message sent to thousands, hoping some of the recipients would fall for the bait. AI has changed this into scripting highly personalised phishing emails in large numbers. Using publicly available information like that on social media, job boards, and companies’ websites, these AI-powered tools can generate emails tailored to an individual’s role, interests, and communication style.

For example, a CFO might receive a fraudulent email that mirrors the tone and formatting of their CEO’s messages, including accurate references to recent company events. This level of customisation makes it exceptionally challenging for employees to distinguish between legitimate and malicious communications.

Deepfake technology

AI has also introduced deepfakes into the phishing arsenal. These are increasingly being leveraged by cybercriminals to create fake but highly accurate audio and video messages, crafted to reflect the voice and appearance of the executives they seek to impersonate.

For example, in one reported case, attackers used a deepfake to impersonate multiple members of staff during a video conference, convincing the employee to transfer approximately $25.6 million. As deepfake technology continues to advance, it is expected that such attacks will become more frequent and harder to detect.

Bypassing traditional defenses

Cybercriminals can manipulate the script of traditional e-mail filtering systems with the use of AI. By analysing and mimicking legitimate email patterns, AI-generated phishing emails can bypass security software detection. Machine learning algorithms can test and refine phishing campaigns in real time, enhancing their success rates and making them increasingly sophisticated.

Why experience is not enough

Even experienced employees are falling victim to these advanced phishing attacks. The level of realism and personalisation that AI can achieve may override the skepticism that keeps experienced professionals cautious. Moreover, AI-generated attacks often exploit human psychology, such as urgency, fear, or authority, pressuring employees into acting without double-checking the authenticity of the request.

Combatting AI-hyped phishing

To defend against AI-driven phishing attacks, organisations must adopt a proactive and multi-layered approach that emphasises comprehensive cybersecurity. Regular, up-to-date AI-focused cybersecurity awareness training is critical for employees, helping them identify the subtle signs of phishing and other malicious tactics.

Kaspersky Automated Security Awareness Platform can help with such training. Alongside this, businesses should implement robust security tools, such as Kaspersky Next and Kaspersky Security for Mail Server, capable of detecting anomalies in emails, such as unusual writing patterns or suspicious metadata.

A zero-trust security model also plays a vital role in minimising the potential damage of a successful attack. By restricting access to sensitive data and systems, this approach ensures that even if attackers breach one layer of security, they cannot compromise the entire network. Together, these measures create a comprehensive defense strategy, combining advanced technology with vigilant human oversight.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

NDPC Issues Critical Advisory as Hackers Target Nigeria’s Key Digital Systems

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has issued a regulatory advisory to data controllers and processors across the country following what it described as escalating threats to Nigeria’s data security architecture.

NDPC Issues Critical Advisory as Hackers Target Nigeria’s Key Digital Systems

NDPC

In a statement signed by Babatunde Bamigboye, lead of Legal, Enforcement and Regulations, the commission said its technical assessment revealed that some shadowy threat actors were engaged in coordinated operations targeting financial systems and critical digital infrastructure in Nigeria.

The commission urged public institutions to comply with the presidential directive of Bola Ahmed Tinubu, which emphasises the strategic importance of data in national development.

According to the NDPC, the President had declared that “data is the new oil,” stressing the need for Ministries, Departments and Agencies (MDAs) to rigorously capture and safeguard information in line with the Nigeria Data Protection Act, 2023.

The commission therefore advised all data controllers and processors to urgently strengthen their technical and organisational measures to protect personal data and ensure compliance with the law.

It listed key measures to include the appointment of trained and certified Data Protection Officers, implementation of comprehensive privacy policies and information security standards, as well as conducting Data Privacy Impact Assessments.

Other measures recommended by the NDPC include deployment of robust identity and access controls such as Multi-Factor Authentication, adoption of zero-trust security architecture, prompt remediation of system vulnerabilities, and continuous patch management.

The commission also emphasised the need to secure cloud infrastructure, application programming interfaces (APIs), databases and access credentials, alongside real-time monitoring, logging and threat detection systems.

Further recommendations include encryption and secure credential handling, regular vulnerability assessment and penetration testing of critical systems, as well as routine backup and resilience testing.

The NDPC warned that organisations that fail to implement appropriate data protection measures in accordance with the Nigeria Data Protection Act, 2023 risk legal liabilities.

It reiterated its commitment to providing regulatory support to organisations while ensuring the protection of personal data and strengthening institutional resilience across all sectors.


Kindly share this post
Continue Reading

E-Business

Africa’s Forex Market in 2026: Key Trends Every Trader Should Watch

Published

on

Kindly share this post

The forex market across Africa is witnessing more participants and more regulatory attention than it did just a few years ago. This growth is part of a bigger picture: Sub-Saharan Africa is expected to expand by 4.3% in 2026, while global forex turnover already hit an estimated $9.6 trillion daily in April 2025. However, there’s more to it than macroeconomic figures.

Africa's Forex Market in 2026: Key Trends Every Trader Should Watch

The trends reshaping the market are happening from within. Here are six worth paying close attention to.

1. Trading Has Moved to the Phone

The number of people accessing the market via mobile phones exceeds those accessing it via traditional bank systems. GSMA states that in Sub-Saharan Africa alone, there are more than 1.1 billion registered mobile money accounts.

The International Monetary Fund states that digitalisation and increased usage of the internet are changing payment systems in the Sub-Saharan Africa region.

Mobile access changes traders’ behavior. It lowers the barrier to entry and speeds up deposits and withdrawals. Therefore, brokers who can provide a quality mobile trading experience will have a huge advantage.

2. Regulators Are Watching

The market is becoming more structured and more transparent. In South Africa, the FSCA regulates market conduct for financial institutions. In Kenya, the Capital Markets Authority regulates capital markets and maintains a licensing system that includes online forex brokers.

Nigeria’s SEC has publicly warned that online retail forex trading can be subject to abuse when unregulated. It also provides tools for investors to check operators’ registrations.

As a result, in 2026, more traders are likely to favour brokers that can show clear licensing, transparent operations, and stronger investor safeguards.

3. Volatility Varies by Country

A common mistake is perceiving the African market as one entity. In reality, according to RegTech Afrika, there are 21 countries out of a total of 54 that have a chance of seeing their currencies depreciate in 2025, with some of them losing value by as much as 6% or more.

A trader watching the rand, naira, shilling, or cedi, regional headlines needs more than regional headlines. Country-level macro data, central bank moves, and the US dollar will still play a major role.

4. Cross-Border Payment Infrastructure Is Quietly Improving

Platforms like PAPSS are helping make payments across African countries faster and easier to complete in local currencies. According to official announcements of PAPSS, it has become operational in 18 countries across Africa, with its latest launch in Algeria in 2025. It has also become operational in Kenya through a partnership with KCB Group, as well as in Rwanda through a partnership with Bank of Kigali.

Step by step, Africa is becoming a more financially connected continent.

5. Execution Quality Is the New Standard

Data from the BIS shows that in April 2025, three-quarters of FX trades were intermediated by the global centers of the United Kingdom, the United States, Singapore, and Hong Kong. Therefore, the best liquidity and best prices are still linked to global conditions.

For local markets, this raises the bar. Forex traders are becoming increasingly aware that tight spreads, while important, mean little without reliable prices and execution. Brokers like JustMarkets that can bring all of these elements together are in a much stronger position than competitors.

6. Education as a Necessity

Regulatory disclosures from major global brokers illustrate how tough it is to trade without proper knowledge. According to publicly available disclosures, between 70% and 80% of retail investor accounts lose money when trading CFDs.

Forex traders who understand risk management and which financial news to follow have a better chance of surviving the market. Brokers who invest in education are more likely to be seen by traders as valuable partners rather than mere facilitators.
The Market Rewards the Prepared

Africa’s forex market in 2026 is shaped by volatility, stricter rules, and mobile-first trading. The traders who combine market knowledge with the right tools and the right broker will find real opportunity here, while those who don’t adapt will find the market increasingly unforgiving.


Kindly share this post
Continue Reading

E-Business

CAC Urges Users to Secure Accounts after Cyberattack Scare

Published

on

Kindly share this post

Corporate Affairs Commission (CAC) has raised  alarm over a cybersecurity incident involving unauthorised access to parts of its information systems, urging users to update their login credentials as a precaution.

CAC Urges Users to Secure Accounts after Cyberattack Scare

In a public notice yesterday, CAC, informed stakeholders that the Commission is currently reviewing the breach and assessing its potential impact.

According to the Commission, response protocols have been activated, with containment measures already in place to safeguard affected systems.

The CAC stated that it is working closely with the National Information Technology Development Agency (NITDA) and other relevant government agencies and partners to determine the scope of the incident and prevent further compromise.

“Appropriate containment measures have been implemented, and additional safeguards are in place,” the Commission stated, while advising users to monitor activities on the CAC portal and remain cautious of unsolicited communications that may arise from the breach.

Reports online claim that as many as 25 million documents may have been exfiltrated from the Commission’s infrastructure.

The claims, attributed to a cybercrime-tracking account, have not been independently verified, and the CAC has not confirmed the figures or identified any perpetrators.

The development has raised fresh concerns over the security of Nigeria’s corporate registry, particularly given the Commission’s increasing reliance on digital systems.

In February 2026, the CAC disclosed that it processes up to 10,000 business registration requests daily, following the deployment of artificial intelligence across its service delivery platforms.

It also handles an average of 5,000 customer enquiries each day via emails and call centres.

Despite the breach, the Commission reaffirmed its commitment to maintaining the integrity and security of its systems, assuring stakeholders that updates will be provided as investigations progress.

 


Kindly share this post
Continue Reading

Trending