UAE sees more than 600,000 phishing attacks in Q2
Consumers and businesses in the UAE suffered more than 600,000 phishing attacks at the height of the Covid-19 stay-at-home measures, according to findings by Kaspersky.
From April to the end of June, more than 2.57 million phishing attacks were detected across the Middle East, from Egypt to the UAE, Saudi Arabia, Qatar, Kuwait, Bahrain and Oman, the global cyber security company said.
Saudi Arabia, the biggest Arab economy, saw 973,061 phishing attacks by cyber criminals during the second quarter, the most in the region. This was followed by the UAE with 617,347 attacks, Egypt (492,532), Oman (193,379), Qatar (128,356), Kuwait (106,245) and Bahrain (67,581), according to the Kaspersky data.
“When summarising the results, we assumed that Covid-19 would be the main topic for spammers and phishers for the past few months. And it certainly happened," Tatyana Sidorina, a security expert at Kaspersky, said.
"While there was the rare spam mailing sent out without mentioning the pandemic, phishers adapted their old schemes to make them relevant for the current news agenda, as well as come up with new tricks.”
Phishing is one of the oldest forms of cyber crime, in which users are lured to a site and tricked into entering their personal information. This could include financial credentials such as bank account passwords and payment card details, or login details for social media accounts. This often results in money being stolen or corporate networks being compromised.
A report from tech security company McAfee in May warned of a worldwide surge in activity from cyber criminals since March as they tried to capitalise on the panic and uncertainty triggered by the Covid-19 crisis.
The substantial increase in people working from home during the pandemic presents more opportunities for cyber criminals to send out phishing e-mails, say industry experts. Prior to the pandemic, more employees were working from offices, which have advanced security systems in place to protect them from cyber attacks.
Another study in June by Dubai Future Foundation found a 600 per cent increase in phishing emails recorded since February, with healthcare facilities at high risk.
Cyber criminals resorted to a number of new tricks to scam victims through phishing – from HR dismissal emails to attacks disguised as delivery notifications, Kaspersky said.
“At the peak of the pandemic, organisations responsible for delivering letters and parcels were in a hurry to notify recipients of possible delays. These are the types of emails that fraudsters began to fake, with victims asked to open an attachment to find out the address of a warehouse where they could pick up a shipment that did not reach its destination,” Kaskpersky said in the report.
Another new technique used by cyber criminals during the pandemic was to send emails to unsuspecting users about amendments to medical leave procedures or arbitrary dismissals. These emails would usually contain virus-laden attachments that could be used to download and install encryptors.
Kaspersky experts advise users to always check online addresses in unknown messages, whether it is the web address of the site you are being directed to, the link address in a message and even the sender’s email address to ensure they are genuine.
Users are recommended to not enter their credentials if they are unsure whether the website is genuine and secure. In the event that you did enter your login and password details on a fake page, immediately call your bank or payment provider to change your password, the cyber security company advised.