DHL – Tech | Business | Economy https://techeconomy.ng Tech | Business | Economy Sat, 30 May 2026 14:31:41 +0000 en-GB hourly 1 https://wordpress.org/?v=7.0 https://techeconomy.ng/wp-content/uploads/2025/06/cropped-256Px-32x32.png DHL – Tech | Business | Economy https://techeconomy.ng 32 32 DHL vs FedEx: Who Delivers Better, From Lagos Streets to Global Shores? https://techeconomy.ng/dhl-vs-fedex-who-delivers-better/ https://techeconomy.ng/dhl-vs-fedex-who-delivers-better/#respond Thu, 26 Jun 2025 12:16:02 +0000 https://techeconomy.ng/?p=161873 When the dispatch rider starts doing more cross-country travel than your senator, you start to realise logistics is one of the sectors still working in Nigeria.

With e-commerce growing by over 15% to 20% in Nigeria annually and over 60% of businesses rely on third-party logistics to move goods, we can now call delivery services the backbone of the country’s informal and formal economy. 

Nigeria’s courier, express, and parcel (CEP) market was valued at over $129.8 million in 2025, and projections suggest it will hit $186.8 million by 2030.

Sometimes, moving a package from Ikeja to Ikoyi or even the UK or Canada is sometimes more complicated than applying for a visa, and logistics giants like DHL and FedEx, are working to ensure seamless delivery locally and internationally. 

It’s no longer just about express international shipping; the demand now includes fast, affordable, and reliable local delivery, as well as seamless international exports for Nigerian businesses and individuals.

With cross-border e-commerce growing and SMEs shipping products abroad, Nigerians now ask: Who does it better locally and globally?

Snapshot: The Two Global Giants

Feature DHL FedEx
Global HQ Bonn, Germany Memphis, USA
Year Founded 1969 1971
Nigeria Entry 1979 Through Red Star Express (1994)
Local Delivery Strength High Moderate (business-focused)
International Reach 220+ countries 220+ countries

 

Local Logistics: Presence vs Precision

DHL has spent years embedding itself in Nigeria’s urban logistics space. You’ll find DHL offices and drop-off points not just in Lagos and Abuja, but in cities like Ibadan, Kano, Enugu, and even satellite towns. Their use of motorbikes, vans, and location hubs makes them visibly active in last-mile fulfilment.

FedEx, operating via Red Star Express, is more visible in corporate corridors, business districts, airports, and office parks. Their operations feel optimised for structured deliveries, not Nigeria’s unstructured situations where a rider may need to call ten times to find your house.

Result: If you’re sending documents to a law firm, FedEx works; if you’re shipping phone accessories to a customer in Asaba, DHL has the network.

Pricing and Usability

Intra-city or inter-state shipping with DHL is relatively affordable for personal and small business use. Their flat-rate pricing for standard-size packages and pre-paid labels help SMEs manage costs. Walk-in access is easy, with drop points across most commercial areas.

FedEx’s pricing model is slightly higher and skewed towards corporate clients. Their standard customer may not be an individual walking in with a package, it’s more often a business dispatching ten at once.

And from a usability perspective, DHL’s mobile tools, WhatsApp support, and integration with e-commerce platforms make it easier for everyday users to plug into their ecosystem.

Local pricing models differ:

  • DHL offers flat-rate intra-city delivery starting at around ₦2,500, depending on weight.
  • FedEx (via Red Star) ranges from ₦3,000 to ₦5,500, and pricing is often less predictable.

In terms of usability, DHL has better integration with WhatsApp, e-commerce fulfilment tools, and walk-in accessibility. Most SMEs prefer DHL’s prepaid labels and cash-on-delivery integration.

International Delivery: Who Handles Nigeria’s Exports Better? DHL or FedEx?

Here’s where things get interesting.

DHL:

  • More integrated with customs and border control, especially for low-weight and commercial packages.
  • Handles a large volume of Nigeria’s international e-commerce shipments—thanks to partnerships with Jumia, Konga, and even Shopify merchants.
  • Known for speedy clearance and delivery tracking when exporting to the UK, US, Europe, and parts of Asia.
  • Offers better individual-level support for walk-in international senders (e.g. families sending items abroad, job seekers submitting documents, etc.).

FedEx:

  • Maintains strong lanes into North America, especially for legal and corporate documents.
  • Often preferred by multinational corporations and embassies due to compliance handling and traceability.
  • Less accessible to walk-in customers shipping small parcels internationally, many still get redirected to Red Star Express locations with less clarity on pricing or package status.

On international delivery, DHL again comes across as more open to the individual and SME-level shipper, while FedEx remains a more formal, high-value logistics player.

DHL:

  • Handles over 50% of Nigeria’s outbound e-commerce shipments (mostly via SMEs).
  • Average delivery time to the UK/Europe: 2–4 business days.
  • Strong customs integration via Murtala Muhammed Airport.
  • Charges for UK/US shipment start from ₦18,000 to ₦25,000 for a 0.5kg parcel.

FedEx:

  • Preferred by multinationals for legal, academic, and regulatory documents.
  • Average delivery time to North America: 3–5 business days.
  • Limited access for low-volume, individual exporters.
  • Shipping cost to UK/US ranges between ₦20,000–₦30,000 for 0.5kg parcel.

Customer Support & Trust

Both brands provide global customer service, but DHL is visibly more responsive within Nigeria. Whether through their official helpline or social media support teams, customer complaints are usually acknowledged and resolved faster.

FedEx, unfortunately, struggles with consistency. Many Nigerian users have reported delays in getting updates, confusion around tracking numbers (especially when Red Star Express is the middleman), and poor escalation protocols.

DHL Nigeria has an average rating of 4.1/5, commended for responsiveness and tracking transparency.

FedEx/Red Star Express averages 3.5/5, with complaints about poor feedback loops and delayed pickups.

Technology & Logistics Intelligence

DHL has invested more visibly in digital logistics infrastructure that speaks to Nigerian realities. Their barcode-based tracking, bulk upload systems for SMEs, and real-time location alerts give the impression of a company that understands where it’s operating.

FedEx, while globally advanced, sometimes lags in local execution. Their global website provides deep functionality, but doesn’t always reflect Nigeria’s shipping nuances, e.g. lack of Naira-based calculators, poor integration of Red Star in live tracking, and fewer customer-friendly mobile tools.

Brand Reputation in Nigeria

DHL is like a Nigerian logistics brand with German roots, FedEx still feels like a foreign logistics brand trying to adapt.

Among SMEs, vendors, and even families shipping items abroad, DHL is more trusted. Their everyday visibility, ease of use, and “we’ll find you even if your street has no name” delivery approach has created brand loyalty.

FedEx holds strong ground in structured sectors, banks, law firms, large corporates, but feels distant from the average Nigerian small business owner or hustler trying to ship goods abroad

Among everyday Nigerians:

  • DHL is seen as reliable, fast, and user-friendly.
  • FedEx is seen as prestigious but distant, good for serious paperwork but not urgent errands.

For corporate exports, sensitive international documents, and high-value overseas deliveries, FedEx is a trusted and solid option.

For local deliveries, SME exports, personal shipments, and end-to-end visibility, DHL is the stronger, more universal choice.

So if you’re running a business in Nigeria and need a reliable logistics partner for both inside Nigeria and outside its borders, DHL wins the day..

Nigeria is fast becoming a production and export base for fashion, tech accessories, food products, and documentation services. Logistics companies must adapt or risk becoming irrelevant.

DHL seems to be moving with the market while FedEx is still trying to meet up.

In this business, proximity to customers beats prestige. DHL has understood that, but FedEx might still be learning.

]]>
https://techeconomy.ng/dhl-vs-fedex-who-delivers-better/feed/ 0
Cybersecurity: Microsoft Tops Most Imitated Brands in Phishing Attacks for Q4 2023 https://techeconomy.ng/cybersecurity-microsoft-tops-most-imitated-brands-in-phishing-attacks-for-q4-2023/ https://techeconomy.ng/cybersecurity-microsoft-tops-most-imitated-brands-in-phishing-attacks-for-q4-2023/#comments Sat, 13 Jan 2024 09:24:08 +0000 https://techeconomy.ng/?p=122593 Check Point Research (CPR), the Threat Intelligence arm of Check Point Software Technologies Ltd. (NASDAQ: CHKP) and a leading provider of cyber security solutions globally, has published its Brand Phishing Report for Q4 2023.

The report highlights the brands that were most frequently imitated by cybercriminals in their attempts to steal individuals’ personal information or payment credentials during October, November and December 2023.

Last quarter, Microsoft claimed the top spot as the number one most impersonated brand, accounting for 33% of all brand phishing attempts.

The technology sector stood out as the most targeted industry overall, with Amazon securing second place with 9% and Google in third on 8%. Social networks and banking represented the other two most targeted industries.

Consumer spending associated with the festive period saw cybercriminals continue to target retailers and couriers in Q4 2023.

The widely recognized package delivery brand DHL moved into the top ten, possibly due to increased activity during the November shopping month, while Amazon’s ranking can largely be attributed to the annual Amazon Fall Prime Day sale that was scheduled during the second week of October.

“While we have said goodbye to 2023, one thing has followed us into the new year and that is the threat of phishing. Even cybercriminals with limited IT expertise can accurately mimic legitimate brands to deceive unsuspecting customers and carry out social engineering attacks” said Omer Dembinsky, Data Group Manager at Check Point Software.  

“Following the widespread use of AI, we can expect to see a higher volume of phishing campaigns this year that are even more indistinguishable from genuine company communications. As the biggest names in technology, social networking and banking continue to be imitated, end users need to be extra vigilant when engaging with emails claiming to be from a reputable brand.”

Top Phishing brands

Below are the top 10 brands ranked by their overall appearance in brand phishing events during Q4 2023:

  1. Microsoft (33%)
  2. Amazon (9%)
  3. Google (8%)
  4. Apple (4%)
  5. Wells Fargo (3%)
  6. LinkedIn (3%)
  7. Home Depot (3%)
  8. Facebook (3%)
  9. Netflix (2%)
  10. DHL (2%)

Microsoft Phishing Email – Email Verification Scam

This deceptive email, posing as the Microsoft account team, claimed to require email address verification and urged recipients to click a verification link. It featured a subject line “Microsoft: Verify your email address” aiming to create a sense of urgency. The phishing link included in the email was: “cloudflare-ipfs[.]com/ipfs/bafybeigjhhhd64vhna67panxz6myhaelya6vphjbic65jog5hvm4mmgpum”.

This link is not associated with Microsoft. The email requested recipients to verify their email address and may potentially lead to fraudulent activities.

Microsoft and brand phishing

Microsoft and brand phishing
Brand phishing report by Check Point Research

Apple Phishing Email – Storage Limit Alert Scam

This deceptive email, posing as Apple, sent from the address “blake@borderpfoten[.]de”, claimed to alert recipients about nearly full storage in their Apple account. The subject line “{The name of the victim} Your Apple Storage is Almost Full!!” (Original: Din Apple Lagring er Næsten Fuld!!) added a personalized touch to create a sense of urgency.

The email included a malicious link: “ktraks[.]futurwatt.com/ga/click/”, which is currently inactive. This link is not associated with Apple.

The email urged recipients to address the storage issue by clicking inactive link, potentially leading to fraudulent activities.

[Featured Image Credit]

]]>
https://techeconomy.ng/cybersecurity-microsoft-tops-most-imitated-brands-in-phishing-attacks-for-q4-2023/feed/ 2
How eCommerce Sub-sector Drives Customer Loyalty, Retention in Business https://techeconomy.ng/how-ecommerce-sub-sector-drives-customer-loyalty-retention-in-business/ https://techeconomy.ng/how-ecommerce-sub-sector-drives-customer-loyalty-retention-in-business/#comments Thu, 02 Nov 2023 07:02:23 +0000 https://techeconomy.ng/?p=117201 Writer: ABHULIMHEN THERESA

When it comes to ecommerce, there’s been an unignorable change driving retail sale, offering unparalleled convenience and an extensive array of products at customers’ fingertips.

However, with so many options available to customers, ecommerce businesses face the challenge of retaining customers and ensuring their loyalty.

Here are several innovative strategies employed by leading ecommerce entities, shaping a future where customer loyalty and retention are at the heart of every transaction.

1. Personalized Product Recommendations:

E-commerce giants such as Amazon and Jumia have leveraged the power of customer data, utilizing past purchases, browsing history, and Wishlist items to craft tailored product recommendations.

Through the anticipation of customer needs and preferences, these businesses enhance the shopping experience, making it both enjoyable and efficient.

For example, Amazon’s “Frequently Bought Together” feature intelligently suggests complementary items based on previous purchases, creating a seamless shopping journey.

2. Omnichannel Experience:

The era of omnichannel experience has dawned, ensuring customers receive a consistent, integrated shopping journey across all platforms—be it online, in-store, or via mobile.

Companies like Konga have mastered this art, enabling customers to seamlessly transition between channels while maintaining a unified account. Again, diverse communication avenues, including WhatsApp, email, and phone, offer customers flexibility, ensuring support availability regardless of their chosen method.

3. Seamless Checkout Process:

Streamlining the checkout process has become a cornerstone of customer loyalty. E-commerce leaders like Konga and Jumia have optimized their platforms, allowing customers to finalize their purchases in a few swift steps, regardless of the device used.

Offering varied payment options, from bank transfers to cash on delivery, these businesses prioritize convenience, resulting in increased loyalty and a growing base of repeat customers.

4. Loyalty Programs:

Enticing loyalty programs, exemplified by Amazon Prime and Starbucks Rewards, have become a hallmark of customer retention. These programs reward customer loyalty with exclusive perks and also deepen brand engagement and foster increased sales.

Through strategic rewards, e-commerce businesses create a symbiotic relationship, ensuring customers are not just buyers but devoted brand advocates.

5. Fast and Reliable Delivery:

Speed and reliability are the cornerstones of a successful e-commerce delivery experience. E-commerce giants like Amazon, with its Prime service, have set the bar high by offering swift shipping.

Courier giants such as FedEx and DHL provide precise tracking, ensuring transparency and elevating customer satisfaction. Fast, dependable deliveries not only meet customer expectations but also nurture trust and loyalty, creating a sense of reliability in the e-commerce landscape.

6. Exceptional Customer Service:

Uncompromising customer service stands as the bedrock of e-commerce loyalty and retention efforts. Companies like Jumia, Konga, and PayPorte employ a multi-channel strategy, offering live chat, email, and phone support. This diverse accessibility reassures customers that their needs are paramount, fostering trust and reliability. Satisfied customers become loyal patrons, reinforcing a robust connection between e-commerce giants and their cherished audience.

7. Reviews and Ratings:

In the world of ecommerce, customer testimonials hold unparalleled influence. Encouraging customers to share their experiences not only aids fellow shoppers but also provides invaluable feedback for continuous improvement.

Platforms like TripAdvisor and Yelp showcase user reviews, guiding others in their purchasing decisions and contributing to a cycle of enhancement and customer satisfaction.

[Featured Image Credit]

]]>
https://techeconomy.ng/how-ecommerce-sub-sector-drives-customer-loyalty-retention-in-business/feed/ 1
Ananse Africa, Ecobank, DHL Set to Train Digital Marketers https://techeconomy.ng/ananse-africa-ecobank-dhl-set-to-train-digital-marketers/ https://techeconomy.ng/ananse-africa-ecobank-dhl-set-to-train-digital-marketers/#comments Sat, 22 Apr 2023 08:04:31 +0000 https://techeconomy.ng/?p=100385
  • Ananse Africa offers free digital marketing and eCommerce training for fashion creatives in Lagos
  • Ananse Africa, in partnership with Mastercard FoundationEcobank and DHL, are returning to Lagos, Nigeria to provide a free e-commerce and digital marketing training for fashion creatives on Thursday, 25 May 2023.

    The training is part of a wider initiative aimed at equipping African fashion entrepreneurs with the skills and knowledge they need to succeed in today’s digital economy.

    It covers various topics, including the fundamentals of digital marketing and e-commerce, SEO, social media marketing campaigns, content strategies, online advertising, and more.

     “We are excited to be hosting this event in Lagos, and we believe it will be a game-changer for fashion creatives in Nigeria,” said Samuel Mensah, Founder of Ananse Africa. “By giving them the skills, they need to succeed in the digital age, we can help African designers reach new markets and build thriving businesses that have a positive impact on their communities.”

    The training programme is open to all fashion creatives, whether they are just starting out or are already established in the industry. Attendees can expect to learn from some of the industry’s brightest minds. There will be interactive sessions, hands-on training, networking opportunities, and more, all designed to help fashion creatives leverage technology to grow their businesses.

    In addition to the training, qualifying attendees will also receive a free product photoshoot session with a professional photographer to help them showcase their designs across multiple digital platforms.

    Registration for the event is now open. So, if you are ready to transform your fashion brand and take the lead in the digital era, simply click here to register. Alternatively, you can send an email to care@ananse.com for more information.

    This initiative is part of a larger training programme taking place in five African countries, namely Kenya, Ghana, Nigeria, Côte d’Ivoire and Senegal. Don’t miss this opportunity to learn from the experts and take your fashion business to the next level. Register today. 

    Ananse Africa is an innovative e-commerce platform that aims to equip African fashion designers and artists with the necessary tools and resources to trade locally and internationally. The platform provides a unique opportunity for African creatives to showcase their works, enabling them to reach a wider audience beyond their local communities.

    ]]>
    https://techeconomy.ng/ananse-africa-ecobank-dhl-set-to-train-digital-marketers/feed/ 2
    NITDA Hails Jumia for Shaping Africa’s eCommerce Landscape in 10 Years https://techeconomy.ng/nitda-hails-jumia-for-shaping-africas-ecommerce-landscape-in-10-years/ https://techeconomy.ng/nitda-hails-jumia-for-shaping-africas-ecommerce-landscape-in-10-years/#respond Thu, 30 Jun 2022 10:52:07 +0000 https://techeconomy.ng/?p=77630 Africa’s e-commerce giant, Jumia has received accolades from industry partners for driving the growth of e-commerce on the continent in the last 10 years of operation.

    The online shopping company held its 10 years anniversary celebration at the Eko Hotel, Lagos, Wednesday with stakeholders across payments, ICT, logistics, and FMCGs in attendance. 

    The Nigeria Information Technology Agency Development (NITDA), DH one the largest and most trusted global shipping and logistics companies celebrated and share fine moments with Jumia.

    From its early beginnings in Lagos as an online retail website, Jumia has grown rapidly within the last decade, becoming a household name representing digital commerce in Nigeria, while increasingly gaining authority in the logistics and digital payments space within the country and across Africa.

    The company’s latest financial report shows that revenue increased by 44 percent, while its quarterly active subscribers increased by 28.7percent, from 2.4 million in Q1 2021 to 3.1 million in Q1 2022. 

    According to Kashifu Inuwa Abdullahi, Director General, NITDA, Jumia has been a worthy partner in the last decade and has shown resilience in driving the e-commerce industry, creating jobs, and being socially responsible. 

    The Director-General of NITDA was represented by Chioma Okeke, Head, South West Zonal Office

    Abdullahi said in the last a decade of business operations in Nigeria Jumia has positively impacted the lives of millions of Nigerians and changed the face of the homeless in the country. 

    “Jumia is a worthy partner, we celebrate your success stories and commend your effort to shape the e-commerce industry in Nigeria. 

    “We have created more jobs for our youth and transformed the commercial face of wholesale and retail businesses while creating ease and comfort. To the Nigerian buyers. This is very commended and we do acknowledge you.” 

    Delivering a keynote address on “The Role of ICT in Shaping the Nigerian Economy”, Abdullahi said there is doubt the rapid development over the past decade has enabled several economic sectors to be more integrated, leading to a significant effect on the nation’s goods across for the National good across countries and sectors. 

    According to him, Information Technology has the potential to save costs, improve service quality reduce response time and access to services increased the effectiveness of e-commerce for all sectors of the economy. 

    Abdullahi said ICT creates a digital ecosystem that is transparent and still more compensated while eliminating bureaucracy for businesses restructuring administrating processes across global supply chains, financial services, healthcare, government, and many other industries. 

    “Innovators such as Jumia are exploring ways to disrupt and transform traditional process models. It is being said you innovate or die as a business. 

    “Many industry leaders have already achieved significant business benefits, including greater transparency, enhanced security, increase efficiency, speed of transactions, and reduce costs.” 

    NITDA boss said, in a timely moment, Nigeria needs to know the process of electronic transaction data in China it has led to very significant improvement in the level of development, efficiency, and productivity of global economies.

    In order to benefit from the economic opportunities offered by electronic commerce federal government and businesses, organizations need effectively integrated information and communication technologies as the major components of the e-commerce campaign initiative. 

     

     

     

     

    “. 

     

    ]]>
    https://techeconomy.ng/nitda-hails-jumia-for-shaping-africas-ecommerce-landscape-in-10-years/feed/ 0
    Avanan Report: Sending Phishing Emails from Quickbooks – What You Should Know https://techeconomy.ng/avanan-report-sending-phishing-emails-from-quickbooks-what-you-should-know/ https://techeconomy.ng/avanan-report-sending-phishing-emails-from-quickbooks-what-you-should-know/#respond Mon, 27 Jun 2022 07:02:28 +0000 https://techeconomy.ng/?p=77253 Hackers continually impersonate trusted brands to get into the inbox. By leveraging the legitimacy of a trusted domain, security solutions are more likely to view the email itself as legitimate. 

    The content of the email may differ from the services that the domain offers. That’s not necessarily important; what is important is leveraging the legitimate service. We call this The Static Expressway.

    This refers to the practice of hackers utilizing websites that are on static Allow Lists to get into the inbox.

    Starting in May 2022, Avanan researchers have observed hackers  using the domain of Quickbooks–quickbooks.intuit.com–to send malicious invoices and request payments.

    The hackers send the email from Quickbooks’ domain, using a free Quickbooks account that they have signed up for, with the email body spoofing brands like Norton or Office 365.

    In this attack brief, Avanan will analyze how hackers are leveraging legitimate and popular websites to get into inboxes and steal credentials and money.   

    Attack

    In this attack, hackers are creating accounts in Quickbooks, and then sending malicious invoices and requests for payments directly from the service.  

    Vector: Email

    Type: Credential Harvesting

    Techniques: Brand Impersonation, Double Spear

    Target: Any end-user

    Email

    In this attack, threat actors are using the legitimacy of Quickbooks to get into the inbox.

    Email Example #1

    In this attack, hackers are presenting what looks like an invoice for Norton. The email comes from a Quickbooks domain. That is because the hackers have signed up for a Quickbooks account, and are sending an invoice from that account. It presents an invoice and encourages you to call if you think there are any questions. When calling the number provided, they will ask for credit card details to cancel the transaction. Note that the number is one associated with such scams, and the address doesn’t correlate with a real one. 

    Techniques

    Hackers, particularly on the dark web, are using a combination of social engineering and legitimate domains to extract money and credentials from end-users. By using a legitimate domain–in this case, Quickbooks–it offers a trusted domain by which to send phishing emails. This process is not unique to Quickbooks.

    Over the years, we’ve seen this across many popular brands, such as MicrosoftGoogle,  WalgreensDHL,  Adobe and many more. The idea is to take advantage of the fact that these popular websites are on static Allow Lists.

    Organizations can’t block Google, so Google-related domains are allowed to come into the inbox.

    These static lists are continually pilfered by hackers. This has manifested itself in hackers hosting phishing content on sites like Milanote.

    In this case, hackers are using the actual domain of Quickbooks to get into the inbox. All they have to do is create an account on Quickbooks, which is simple and free to do. Quickbooks is a trusted domain–static Allow Lists will let it fly into the inbox. 

    Once there, they present classic social engineering tactics, such as urgency and monetary damages. By requiring the end-user to call to see what’s going on, the hackers then harvest the phone number, allowing them to use it for future attacks. We call this tactic phone number harvesting.

    This attack then presents a one-two punch. The hackers get money, and have a phone number for future attacks, whether it’s via text message or WhatsApp.   

    This attack works because of what hackers on the dark web call a double spear:

    • Make the user call the listed telephone number
    • Make the user pay the invoice

    Add to the fact that there’s built-in legitimacy since the email comes from Quickbooks and this represents a particularly tricky and effective phishing campaign.  

    Best Practices: Guidance and Recommendations

    To guard against these attacks, security professionals can do the following:

    • Before calling an unfamiliar service, Google the number and check accounts to see if there were, in fact, any charges
    • Implement advanced security that looks at more than one indicator to determine in an email is clean or not
    • Encourage users to ask IT if they are unsure about the legitimacy of an email
    ]]>
    https://techeconomy.ng/avanan-report-sending-phishing-emails-from-quickbooks-what-you-should-know/feed/ 0
    DHL replaces Microsoft as most imitated brand in phishing attempts in Q4 2021 https://techeconomy.ng/dhl-replaces-microsoft-as-most-imitated-brand-in-phishing-attempts-in-q4-2021/ https://techeconomy.ng/dhl-replaces-microsoft-as-most-imitated-brand-in-phishing-attempts-in-q4-2021/#respond Fri, 21 Jan 2022 07:54:38 +0000 https://techeconomy.ng/?p=66528 Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies Ltd. and a leading provider of cyber security solutions globally, has published its new Brand Phishing Report for Q4 2021.

    The report highlights the brands which were most frequently imitated by criminals in their attempts to steal individuals’ personal information or payment credentials during October, November and December.

    For the first time, DHL took the number one spot in Q4, replacing Microsoft as the brand most likely to be targeted by cybercriminals in phishing scams.

    Twenty-three percent of all brand phishing attempts were related to the global logistics and shipping company, up from just 9% in Q3, as threat actors sought to take advantage of vulnerable online consumers during the busiest retail period of the year.

    Microsoft, which yet again led the rankings in Q3 by accounting for 29% of all phishing attempts, only accounted for 20% of phishing scams in Q4.

    FedEx also appeared in the top ten list for the first time in Q4 2021, no doubt the result of threat actors trying to target vulnerable online shoppers in the run-up to the festive season as the pandemic remained a key concern.

    The Q4 report also reinforces an emerging trend from Q3, with social media seeming to solidify its position among the top three sectors imitated in phishing attempts.

    While Facebook has dropped out of the top ten brands most likely to be imitated, WhatsApp has moved from 6th position to 3rd, now accounting for 11% of all phishing attempts. LinkedIn has moved from 8th position to 5th, now accounting for 8% of all phishing-related attacks.

    “It’s important to remember that cybercriminals are opportunists first and foremost. In their attempts to steal peoples’ personal data or deploy malware onto a user’s machine, criminal groups will often take advantage of consumer trends by imitating popular brands,” said Omer Dembinsky, data research group manager at Check Point Software. “This quarter, for the first time, we’ve seen global logistics company DHL top the rankings as the most likely brand to be imitated, presumably to capitalize on the soaring number of new and potentially vulnerable online shoppers during the year’s busiest retail period. Older users in particular, who are less likely to be as technologically savvy as younger generations, will be shopping online for the first time and might not know what to look for when it comes to things like delivery confirmation emails or tracking updates.”

    Omer continued, “Q4 has also confirmed what many of us were expecting. That social media would continue to be heavily targeted by bad actors looking to take advantage of those leaning more heavily on channels like WhatsApp, Facebook and LinkedIn as a result of remote working and other fallouts from the pandemic.

    Unfortunately, there’s only so much brands like DHL, Microsoft and WhatsApp – which represent the top 3 most imitated brands in Q4 – can do to combat phishing attempts. It’s all too easy for the human element to overlook things like misspelt domains, typos, incorrect dates or other suspicious details, and that’s what opens the door to further damage.  We’d urge all users to be very mindful of these details when dealing with the likes of DHL in the coming months.”

    In a brand phishing attack, criminals try to imitate the official website of a well-known brand by using a similar domain name or URL and web-page design to the genuine site.

    The link to the fake website can be sent to targeted individuals by email or text message, a user can be redirected during web browsing, or it may be triggered from a fraudulent mobile application.

    The fake website often contains a form intended to steal users’ credentials, payment details or other personal information.

    Top phishing brands in Q4 2021

    Below are the top brands ranked by their overall appearance in brand phishing attempts:

    1. DHL (related to 23% of all phishing attacks globally)
    2. Microsoft (20%)
    3. WhatsApp (11%)
    4. Google (10%)
    5. LinkedIn (8%)
    6. Amazon (4%)
    7. FedEx (3%)
    8. Roblox (3%)
    9. Paypal (2%)
    10. Apple (2%)

    PayPal Phishing Email – Account Theft Example

    During November sales days, we noticed a malicious phishing email that was allegedly sent by PayPal and was trying to steal users’ credit information. The email (see Figure 1) which was sent from the spoofed address PayPal Service (service@ec2-18-156-114-201[.]eu-central-1[.]compute[.]amazonaws[.]com) was actually sent by admin_emotion_dev@emotionstudios[.]rocks, contained the socially engineered subject “[Alert] Confirm your PayPal account (Case ID #XX XXXXXXXXXX)” which could pressure the victim into clicking on the malicious link (https://serviiceds[.]ritaspizzaportsmouth[.]com/llpy/).

    The website redirects the user to a fraudulent PayPal login page that looks like the real site (see Figure 2) with a few minor differences in appearance. In the malicious link, the user needed to enter their PayPal account details.

    PayPal

    PayPal as imitated brand in phishing attempts in Q4 2021
    PayPal as imitated brand in phishing attempts in Q4 2021

    Fedex Phishing Email – Malware Attached

    During December, we observed a malicious phishing email that used Fedex’s branding and was trying to get the user to download SnakeKeylogger malware to their machine.

    The email (see Figure 1) which was sent from the spoofed address support@fedex[.]com, contained the subject “Bill of Lading-PL/CI/BL-Documents arrival”.

    The content is asking to download a RAR archive file “shipment docu..rar”, which contains a malicious executable file that would cause the system to be infected with SnakeKeylogger and could steal the user’s credentials information.

    Fedex as imitated brand in phishing attempts in Q4 2021

    DHL Phishing Email – Credentials Theft Example

    In this phishing email (see Figure 1), we see an attempt to steal users’ email and password. It was sent from the spoofed email address DHL Customer Support (info@emmc[.]ir), contained the subject “DHL Shipment Notification : xxxxxxxxxx “Out for delivery” for 15 Dec 21”.

    The attacker was trying to lure the victim to click on a malicious link (http://reg[.]chaindaohang[.]com/wp-content/uploads/2021/07/dhl/index[.]php?i=i&0=vegenat@vegenat[.]es) which redirects the user to a fraudulent DHL home page, that looks like the real website (see Figure 2). In the malicious link, the user was prompted to key-in their email and password.

    DHL replaces Microsoft as most imitated brand in phishing attempts in Q4 2021

    DHL replaces Microsoft as most imitated brand in phishing attempts in Q4 2021

    As always, we encourage users to be cautious when divulging personal data and credentials to business applications or websites, and to think twice before opening email attachments or links, especially emails that claim to be from companies such as DHL, Microsoft or Whastapp, as they are the most likely to be impersonated.

    ]]>
    https://techeconomy.ng/dhl-replaces-microsoft-as-most-imitated-brand-in-phishing-attempts-in-q4-2021/feed/ 0