Connect with us

E-Business

Why Even the Most Experienced can Fall Victim of AI Phishing Attacks

Published

on

Kindly share this post

The evolution of AI is not only affecting various industries, but it has also transformed cybercriminals’ tactics. One alarming trend is the use of AI to enhance phishing scams, refining them, targeting specific individuals, and making these attacks almost impossible to recognise.

Kaspersky reviews how AI is changing phishing techniques and why even the most cyber-aware employees may fall for these scams.

According to a recent Kaspersky study, the number of cyberattacks experienced by organisations in the last 12-months is reported to have increased by nearly half (48%) in the Middle East, Turkiye and Africa (META) region.

The most ubiquitous threat came from phishing attacks, with 51% of those questioned in the META region reporting this type of incident. With AI becoming a more prevalent enabler for cybercriminals, over half of the respondents in META (53%) anticipate significant growth in the number of phishing attacks. In this text, Kaspersky examine how AI is used in phishing and why experience alone is sometimes not enough to avoid becoming a victim.

Personalisation through AI

Previously, phishing attacks relied on a generic mass message sent to thousands, hoping some of the recipients would fall for the bait. AI has changed this into scripting highly personalised phishing emails in large numbers. Using publicly available information like that on social media, job boards, and companies’ websites, these AI-powered tools can generate emails tailored to an individual’s role, interests, and communication style.

For example, a CFO might receive a fraudulent email that mirrors the tone and formatting of their CEO’s messages, including accurate references to recent company events. This level of customisation makes it exceptionally challenging for employees to distinguish between legitimate and malicious communications.

Deepfake technology

AI has also introduced deepfakes into the phishing arsenal. These are increasingly being leveraged by cybercriminals to create fake but highly accurate audio and video messages, crafted to reflect the voice and appearance of the executives they seek to impersonate.

For example, in one reported case, attackers used a deepfake to impersonate multiple members of staff during a video conference, convincing the employee to transfer approximately $25.6 million. As deepfake technology continues to advance, it is expected that such attacks will become more frequent and harder to detect.

Bypassing traditional defenses

Cybercriminals can manipulate the script of traditional e-mail filtering systems with the use of AI. By analysing and mimicking legitimate email patterns, AI-generated phishing emails can bypass security software detection. Machine learning algorithms can test and refine phishing campaigns in real time, enhancing their success rates and making them increasingly sophisticated.

Why experience is not enough

Even experienced employees are falling victim to these advanced phishing attacks. The level of realism and personalisation that AI can achieve may override the skepticism that keeps experienced professionals cautious. Moreover, AI-generated attacks often exploit human psychology, such as urgency, fear, or authority, pressuring employees into acting without double-checking the authenticity of the request.

Combatting AI-hyped phishing

To defend against AI-driven phishing attacks, organisations must adopt a proactive and multi-layered approach that emphasises comprehensive cybersecurity. Regular, up-to-date AI-focused cybersecurity awareness training is critical for employees, helping them identify the subtle signs of phishing and other malicious tactics.

Kaspersky Automated Security Awareness Platform can help with such training. Alongside this, businesses should implement robust security tools, such as Kaspersky Next and Kaspersky Security for Mail Server, capable of detecting anomalies in emails, such as unusual writing patterns or suspicious metadata.

A zero-trust security model also plays a vital role in minimising the potential damage of a successful attack. By restricting access to sensitive data and systems, this approach ensures that even if attackers breach one layer of security, they cannot compromise the entire network. Together, these measures create a comprehensive defense strategy, combining advanced technology with vigilant human oversight.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

FG Mulls Fibre Optic Layout to Bridge Internet Gaps

Published

on

Kindly share this post

President Bola Tinubu said that his administration has initiated a project to install fibre optic cables across the country, aimed at enhancing the socio-economic development of Nigeria.

FG Mulls Fibre Optic Layout to Bridge Internet Gaps

His plans were contained in a speech he delivered at a joint session of the National Assembly in commemoration of Democracy Day on Thursday, June 12.

He said the fibre optic layout is part of other projects being embarked on.

“In addition, we have embarked on an ambitious project to lay fibre optic cables across the nation, a transformative step toward bridging the digital divide and fostering greater connectivity.

“This initiative promises not only to enhance the speed and reliability of internet access but also to revolutionise how businesses operate, how students learn, and how communities stay connected,” Tinubu stated.

He maintained that by extending this critical infrastructure, his government is empowering entrepreneurs, enabling digital education, and providing the tools for our youth to compete in a globalised world.

In a most recent report on Internet connectivity, The ICIR pointed out how Nigeria has faced setbacks in its deployment of fibre optic cables and needs a transformation.

The challenges revolve around vandalism, inadequate coordination between road construction and telecom infrastructure, and varying right-of-way (RoW) charges across states.

Among industry experts, these issues impact network outages, increase repair costs, and hinder broadband expansion efforts.

It has also further threatened the digital economy, leading to slower Internet speeds, dropped calls, and unreliable connectivity among others.


Kindly share this post
Continue Reading

E-Business

African Startups Raised $345m in Funding in May

Published

on

Kindly share this post

African startups raised more than $345 million across 65 deals in May, more than double the amount raised in the same period of last year, according to a report by Briter, a research and business intelligence firm.

The report disclosed that both the number of deals and participating companies declined, confirming a growing trend of fewer companies raising funds in larger sizes.

It said fintech attracted the highest share of funding in May, accounting for 34 percent of the total, while cleantech followed closely, driven by a debt deal from Sun King. The company raised $80 million (in local currency) to expand clean energy access in Nigeria.

“Equity remains the primary instrument in terms of total value. There’s no doubt about it; in fact, equity deals with disclosed amounts captured more than half of the total funding volume in May.

“However, debt financing is increasingly proving its weight. Although it accounted for only 8 percent of all deals, it represented 32 percent of the total funding, highlighting the typically larger size of debt transactions. With the rise of specialised vehicles targeting early-stage businesses, debt is becoming an increasingly important part of Africa’s innovation funding landscape,” it said.

Briter’s report added that grants continued to play a vital role in early-stage support, especially in the education technology (EdTech) sector. The Mastercard Foundation led the pack in grant activity, funding a new cohort of EdTech innovators in Nigeria and Kenya. Each selected startup is set to receive $100,000 in grant funding, in addition to mentorship and business development support.

Multilaterals also made a strong showing in May, it said. The Multilateral Investment Guarantee Agency (MIGA), a World Bank Group member, issued a $179.6 million guarantee to CleanTech firm KOKO Networks. The support will help scale its clean energy solutions across Kenya.

“This deal not only demonstrates growing international confidence in African climate ventures but also signals a promising pathway for other asset-intensive startups in clean cooking, agriculture, and renewable energy,” the report said.

From a geographic perspective, Egypt emerged as the continent’s fundraising powerhouse for the month, contributing 51 percent of all funding raised. The country recorded 12 deals across equity, debt, and bond instruments. Notably, FinTech platform MNT-Halan raised $50 million through a bond issuance, further illustrating the diversification of capital-raising mechanisms in the region.

Outside Egypt, funding was distributed across Africa’s three other key markets, which are Egypt, Nigeria, and Kenya, with limited activity recorded in countries such as Ghana, Tunisia, Morocco, and Uganda, each registering between one and three deals.

In terms of exits, the African tech landscape continues to mature. Three companies—Baobab+, Qardy, and Shopa—were acquired in May, bringing the total number of exits this year to 22. This already surpasses last year’s count for the same period. Qardy was acquired by Catalyst Partners Middle East (CPME) in a disclosed deal valued at $23 million, the report added.

 


Kindly share this post
Continue Reading

E-Business

Human Hacking: When Cyber Criminals Target You

Published

on

Kindly share this post

By Nancy Werteen

When you get anti-hacking advice, you’ve probably heard “Don’t use a simple password,” or “Don’t plug in that USB you found on the ground.”

Human Hacking: When Cyber Criminals Target You

But there’s one form of hacking that doesn’t always require a computer, and it costs businesses about 4.88 million dollars a year.

Modern hackers aren’t trying to get into your computer; they’re trying to get into you.

“They’ll try to learn about you a little bit, and they’ll try to use that information against you to try to get you to complete some action, maybe to send somebody some money,” said Kevin Moran, PhD, Assistant Professor of Computer Science, Cyber Security and Privacy Cluster, University of Central Florida.

IBM calls this human hacking, because it exploits human error instead of system error.

“With people just being busy and maybe not very carefully checking some of the emails or the phone calls that they get, can be something unfortunately that people can fall victim to,” said Moran.

Also known as social engineering, this often takes the form of phishing, where the hacker tries to “fish” the information out of you by impersonating family, friends, or even your bank.

There’s also baiting, where the hacker baits you with something of value. Remember the Nigerian prince scam?

That’s a famous example of baiting. There’s also pretexting, where the hacker will claim the victim has already been hacked, and that the hacker can fix it if you just send over your passwords. So, what can you do?

“Just as a rule of thumb, instead of clicking on links and emails, just go to the website yourself. And that will prevent, a lot of these types of attacks from happening,” explained Moran.

Phishing can take many forms.

Spear phishing targets people with access to confidential information, often to get access into an entire business, and whale phishing targets CEOs or political figures.

Search engine phishing is when hackers create fake websites promising services or goods you’ll never receive.

Angler phishing is when hackers create fake social media accounts impersonating famous people or companies.

Finally, vishing and smishing is phishing done through phone calls and texts respectively.

 

 

 

 

 


Kindly share this post
Continue Reading

Trending