COUNT
Kaspersky blocks close to 1M financial phishing attacks eyeing SEA businesses last year
March 20, 2023 9:54 p.m.
Phishing is one of the most prevalent forms of cybercrime due to the minimal effort required and the fact that it really works.
It’s usually built around an inherently simple scheme: using carefully crafted emails or notifications that mimic messages from banks, government organizations, entertainment platforms—really any service—cybercriminals can trick users into following a link to a fraudulent website and giving up their payment or personal details or even downloading malicious programs.
Kaspersky in 2022 has blocked a total of 822,536 financial phishing targeted at companies in Southeast Asia (SEA). From SMBs to large enterprises, financial phishers kept trying to infect businesses in the
region last year.
In this case, “financial phishing” refers not only to banking specific phishing but also payment systems and e-shops. Payment system phishing includes pages impersonating well-known payment brands, such as PayPal, MasterCard, American Express, Visa and others. E-shops refer to online stores and auction sites like Amazon, the Apple Store, Steam, eBay etc.
Indonesia chalked up the highest number of financial phishing incidents (208,238). Vietnam comes second with 172,694, and Malaysia recorded 120,656. Thailand logged 101,461 phishing attempts related to finances, followed by the Philippines with 52,914, and Singapore with 22,109.
“It’s interesting to see companies being targeted by financial phishing but we have to remember here that businesses, at their core, are still made up of humans. Phishing is a type of social engineering attack. Social engineering attack is dubbed as hacking of the human mind. With nine out of ten employees needing basic cybersecurity skills training, cybercriminals know that the workforce remains a loophole they can exploit easily to launch a cyberattack against a company,” says Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky.
As reported, phishing email is usually the first chapter of 91% of all cyberattacks. A phishing simulation done by Kaspersky reinforced how cybercriminals trick employees into clicking malicious mails.
It showed that workers tend not to notice pitfalls hidden in emails devoted to corporate issues and online delivery problem notifications and almost one in five (16% to 18%) clicked the link in the email templates imitating these phishing attacks.
Among the other phishing emails that gained a significant number of clicks are; reservation confirmations from a booking service (11%), a notification about an order placement (11%), and an IKEA contest announcement (10%).
To prevent complex attacks, and any related financial and reputational losses caused by phishing attacks, Kaspersky recommends the following for businesses:
- Remind your employees about the basic signs of phishing emails. A dramatic subject line, mistakes and typos, inconsistent sender addresses and suspicious links;
- If there is any doubt about the received email, check the format of attachments before opening them and the link accuracy before clicking. This can be achieved by hovering over these elements – making sure the address looks authentic and the attached files are not in an executable format;
- Always report phishing attacks. If you spot a phishing attack, report it to your IT security department and, if possible, avoid opening the malicious email. This will allow your cybersecurity team to reconfigure anti-spam policies and prevent an incident;
- Supply your employees with basic cybersecurity knowledge. Education should be aimed at changing the behavior of learners and teaching them how to deal with threats. As a major cybersecurity vendor, Kaspersky possesses a relevant base of information on real attacks and continuously supplements its Security Awareness Trainings in accordance with the current threat landscape;
- Since phishing attempts can be confusing, and there’s no guarantee of avoiding all accident clicks, protect your working devices and your enterprise perimeters with a holistic expert security like Kaspersky Extended Detection and Response (XDR) platform. It provides anti-spam capabilities, tracks suspicious behavior, and creates a backup copy of your files in case of ransomware attacks. Anti-phishing protection is also included, as well as threat hunting.
Enterprises can find out more about this new platform at go.kaspersky.com/expert .
Kaspersky in Southeast Asia also has launched a Buy 1 Free 1 promo. Businesses can now enjoy two years of enterprise-grade endpoint protection for the price of 1 with Kaspersky Endpoint Security for Business or Cloud or Kaspersky Endpoint Detection and Response Optimum, with 24×7 phone support. Interested customers can reach out to sea.sales@kaspersky.com.
COUNT
There’s a Nanyang near you for all your Singaporean food cravings
August 4, 2023 6:30 p.m.
Missing Singapore’s famous Hainanese Chicken Rice, Laksa fishball, Cheesy Chicken Chop Noodles and Kopi?
Visit your nearest Nanyang Philippines branch.
COUNT
Globe powers up TOYCON 2023’s landmark 20th year
June 29, 2023 6:53 p.m.
As Toycon Philippines proudly commemorates its 20th year, the landmark celebration promises to be more electrifying than ever with the formidable support of leading digital lifestyle brand Globe.
For the first time, Globe is the title sponsor of the iconic pop-culture event, bringing a new level of excitement and engagement to the toy collector and creator community.
Globe has always been at the forefront of supporting diverse subcultures and passions, and this partnership is a testament to its commitment. As part of the collaboration, Globe will bring to life the rich world of its cinematic and theatrical partners, further enriching the TOYCON 2023 experience for attendees.
“Globe is thrilled to collaborate with Toycon Philippines, especially on such a milestone year,” said Mike Magpily, VP, Head of Segment Strategy and Subcultures at Globe.
“As the country’s most reliable network and top digital solutions platform with an ecosystem of various services, we’re uniquely positioned to foster the vibrancy of the toy collecting and creating community. This partnership underscores our commitment to nurturing a wide array of passions and interests while ensuring the best connectivity for all participants.”
Cholo Mallillin, Marketing Head at Toycon Philippines, said: “The collaboration with Globe will further elevate the Toycon experience. This partnership will bring more surprises and rewards to our community. We invite everyone to join us as we celebrate 20 years of Toycon in the most exciting way possible.”
TOYCON 2023 will be held at the SMX Convention Center in MOA from July 7 to 9, 2023. Attendees are in for a treat, as they have the chance to meet their beloved childhood characters, explore an expansive marketplace of unique toys and collectibles, and participate in exclusive Globe activities.
One of the highlights of the partnership is a series of exclusive perks for Globe customers. By using Globe Rewards points, customers will have the opportunity to win various ticket tiers ranging from Day Passes to VIP Passes. There will also be exclusive toy freebies for VIP pass holders, and unique Globe-only activities, such as paint-your-own Gudi.
At the event, Globe will also host an interactive booth featuring activities designed to reward and inspire. From earning freebies by donating Rewards points to a good cause, to free arcade plays and meet-ups with popular streamers, Globe customers are in for an exciting weekend of gaming and beyond.
To keep up-to-date with all the exciting promotions and surprises at TOYCON 2023, Globe customers are encouraged to use the GlobeOne app.
To learn more about Globe, visit https://www.globe.com.ph/.
COUNT
Love the long weekend break? Cybercriminals do, too
April 4, 2023 5:11 p.m.
There are 18 official public holidays in the Philippines. As we all know, when these dates fall close to a weekend or if the government pursues holiday economics, most Filipinos make plans in advance to take advantage of extended holiday breaks. This year, we can get to do that at least 12 times.
Unfortunately, cybercriminals get excited about holidays, too. To refresh everyone’s memory, the $81-million Bangladesh Bank heist back in 2016 is an example of a successful cyber attack, which happened on the first day of Lunar New Year, a national holiday in the Philippines and the rest of Asia.
“Now that the world has reopened, travel is back with a vengeance this year, hence the term ‘travel revenge’. Whether Filipinos are scheduling holiday trips or just staycation-ing during the long weekends, it’s important to observe simple digital security practices so you can get to sit back and relax as you take your well-deserved vacation. Security-first thinking opens doors for a more enjoyable holiday break, especially for Filipinos who are amongst the world’s most active online users,” comments Chris Connell, Managing Director for Asia Pacific at Kaspersky.
Both individuals and companies are advised to be extra mindful of personal cybersecurity best practices and internet hygiene when on a holiday.
For companies, Kaspersky suggests to:
- Conduct drills
- Stress to vacationing employees why data encryption, two-factor authentication, strong passwords, and locking devices when not in use are important.
- Discuss the steps to take if their device ends up getting stolen.
- Advise staff about charging smartphones in a wall socket, not through USBs at airports and other public places (these can be used to steal data from a device and infect it with malicious software, such as spyware.
- Educate employees about the dangers of public WIFI (and even hotel WIFI unless it is encrypted and password-protected) and how to use a secure connection such as with a VPN.
- Log out
- Terminate unnecessary VPN connections to the corporate infrastructure.
- End unnecessary sessions that employees have left on any devices for an extended period of time. This also applies to corporate messengers, web apps and any other services.
- Check that the list of employees with access to the corporate network via VPN or RDP include only authorized users. Revoke access from those who don’t need it.
- Create special “emergency” admin accounts for potential incident response over the holidays. The rights granted to regular admin accounts can even be temporarily restricted so that attackers cannot exploit them.
- Install patches for all key applications. This process is far simpler if your company uses security solutions with a built-in patch management system.
Meanwhile, Kaspersky encourages individuals to:
- Only browse trusted apps and websites and be careful about personal information you input like credit card numbers or home address.
- Do not click on links or open email attachments from travel sites when receiving confirmations. Trusted companies include such letters in the bodies of their emails. Malware is often disguised as an attached confirmation letter.
- Bring two or three or more credit or debit cards to have a backup plan in case of loss or needing to cancel one.
- Never leave valuables unattended. Put large amounts of cash and mobile devices or laptops in the hotel safe.
- Use a credit card as most have built-in protections against fraud. There is no protection against a scammer if you send them cash or even check or debit card payment in some cases. A money transfer service is not advisable.
- Ensure their devices has security software installed, ideally with anti-theft technology.
Experience next-level fun at SM Game Park MOA
NU Lady Bulldogs reach UAAP for 9th consecutive time
Kaspersky reports more than 340, 000 attacks with new malicious WhatsApp mod
Ateneo gives PBA guest team fits in 102-93 loss
First in Manila! All immersive experiences lead to SM with its 3D Whale Shark billboard, Space Tunnel, Golden Gateway, dazzling light shows
