CyberDome and Cato Networks Collaborate to Deliver SASE in West Africa

CyberDome and Cato Networks Collaborate to Deliver SASE in West Africa

 

 

CyberDome, West Africa’s leading Managed Security Services Provider (MSSP), has announced a collaboration with Cato Networks, the SASE leader ,to deliver Secure Access Service Edge (SASE) across the region.

The collaboration has been described as a game changer for organizations in West Africa, delivering the Cato SASE Cloud Platform —which converges networking and security in a single, cloud-native platform through CyberDome’s always-on, locally managed Security operations Center (SOC). The result: a modern,secure-by-design infrastructure built for today’s cloud-first world.

“We’re blowing past the limitations of traditional IT,” said Eyal Titinger, Co-founder of CyberDome. “This collaboration brings together global technology and local expertise to deliver seamless, secure, and scalable connectivity—exactly what West Africa’s fastest-growing enterprises need.”

Goodbye Boxes. Hello Cloud Power.

This collaboration empowers organizations to eliminate legacy hardware and embrace agile, software-defined infrastructure. Benefits

include:

● Real-time, secure connection of users, offices, and cloud

resources across geographies.

● Built-in zero trust and SASE security to protect every edge.

● Simplified IT management and fast, uncompromised scalability.

As West African enterprises accelerate digital transformation and hybrid work models, CyberDome and Cato Networks are uniquely positioned to support their journey—providing a platform that combines agility, security, and simplicity at scale.Built for the Realities of West Africa From major financial institutions and government agencies to telcos and critical infrastructure providers, this collaboration addresses the region’s unique challenges with a bold, unified approach.

“This is about unleashing innovation and growth without the fear of cyber risk,”said Eyal. “It’s security and performance in one bold move.

CyberDome is West Africa’s leading Managed Security Services Provider (MSSP), delivering real-time cyber defense, threat intelligence, compliance support, and 24/7 monitoring from its cutting- edge SOC in Nigeria. With deep local roots and global reach,CyberDome is redefining how African enterprises stay secure in a digital world.

 

 

BorderlessTek Launches Lifeline for Underprivileged Nigerian Children Through Coding

BorderlessTek Launches Lifeline for Underprivileged Nigerian Children Through Coding

 

In a powerful intervention against digital exclusion, a UK-based Nigerian tech entrepreneur, Wale Atekoja, is rewriting the future of disadvantaged children in Lagos, one line of code at a time.

His organization, Borderless Tek, has launched the Kids Coding Partnership — a grassroots tech education program designed to equip underprivileged schoolchildren in communities like Ikorodu and Yaba with foundational coding and software development skills, completely free of charge.

This is not just another CSR initiative. It’s a deliberate human-centered response to the growing digital divide that continues to marginalize low-income Nigerian children from the technology revolution sweeping the globe.

“We’ve been teaching Black kids in Europe how to code, but what about those back home?” says Wale Atekoja, better known as @AtexXeta on social media. “We’re not targeting the privileged. We’re starting with the forgotten — the children who have never touched a laptop.”

 

The first three-month cohort of the program is scheduled to kick off in September 2025, targeting public Junior and Senior Secondary School students across Lagos’ low-income areas. The curriculum will focus on practical, hands-on learning — from basic programming to animation, mobile app creation, and problem-solving.

But Wale is not walking this path alone.

The initiative is supported by strategic partners such as Yesding (education facilitation), Proline (internet infrastructure), and Akowe App, a credential verification startup that will ensure every certificate earned is both digitally secured and internationally recognized.

> “This is how we break cycles of exclusion,” says Olamide Busari, a representative from Akowe. “These children will walk away not only with new skills but with verifiable certificates that open doors.”Borderless Technology (@BorderlessTek) / X

 

This credibility ensures the effort extends beyond the classroom — helping students qualify for advanced training, internships, or even scholarships. It’s about real-world impact, not just inspiration.

The classrooms — to be set up in schools and libraries — are being fitted with digital infrastructure through partnerships with local governments and community stakeholders. Earlier pilot classes held this year already demonstrated tangible success: students who had never used a laptop built mobile apps and animations in just weeks.

Wale’s intervention is not just technical — it is deeply personal. Raised in Nigeria, he knows what it feels like to have the intellect but not the opportunity.

“I know what it’s like to be capable but invisible,” he says. “That’s why we’re building a new table — not waiting for a seat at someone else’s.”

 “We’ve been teaching Black kids in Europe how to code, but what about those back home?” says Wale Atekoja, better known as @AtexXeta on social media. “We’re not targeting the privileged. We’re starting with the forgotten — the children who have never touched a laptop.”

He is calling on corporate entities, public servants, NGOs, and everyday Nigerians to join the effort — by donating laptops, sponsoring training centers, or mentoring the children.

“We’ve opened the doors,” Wale adds. “But we need others to help keep them open.”

In a country where millions of young people are at risk of being left behind in the tech-driven global economy, the Kids Coding Partnership is more than a program — it is a necessary human intervention. A digital lifeline. A second chance.

And for many Nigerian children, it may be their first real shot at creating — not just consuming — the future.

Zoracom Hosts Successful Policy Sensitization Workshop

Zoracom Hosts Successful Policy Sensitization Workshop

 

Zoracom recently held a Policy Sensitization Workshop designed to strengthen staff understanding of the organization’s core policies and operational values. The event provided an in-depth overview of the company’s essential guidelines, equipping employees with the knowledge to align with Zoracom’s principles in their daily tasks.

The workshop emphasized the importance of adhering to policies as a foundation for delivering reliable and secure services to clients. This initiative reflects Zoracom’s unwavering commitment to excellence, particularly in the precise monitoring and management of its network infrastructure.

With a focus on professional growth and team alignment, the workshop underscored the company’s dedication to empowering its workforce to uphold its reputation for superior service delivery.

For businesses seeking to enhance their network infrastructure, Zoracom invites you to book a demo and experience the difference its expertise can make.

#Zoracom #PolicySensitization #ProfessionalDevelopment #TeamExcellence

 

Anatsa Banking Trojan: A New Threat to Android Users – Anthony Emeka Nwosu

Anatsa Banking Trojan: A New Threat to Android Users – Anthony Emeka Nwosu

 

The Nigeria Computer Emergency Response Team (ngCERT), operating under the Office of the National Security Adviser, has issued a critical warning to Nigerian Android device users about a potent new malware known as the Anatsa banking trojan.

The Anatsa banking trojan is a sophisticated type of malware specifically engineered to target banking applications. Once it infiltrates an Android device, it stealthily steals financial information, including login credentials, personal identification numbers (PINs), and even banking transaction details.

The advisory from ngCERT outlines the increasing cyber threats posed to bank customers, citing a surge in reports of such incidents. This warning comes as part of a broader effort to protect the financial data of millions of Nigerians who rely on mobile banking for their daily transactions.

Instances of Anatsa Banking Trojan Attacks

In one notable instance, users received seemingly legitimate emails or text messages from their banks, prompting them to click on a link to update their account information. Once clicked, the link redirected them to a fake banking site that captured their login details and transmitted them to the malware operators.

Several Android users reported downloading apps from third-party app stores that appeared to be genuine banking or utility apps. These apps, once installed, activated the Anatsa trojan, which silently collected sensitive banking information and sent it to cybercriminals.

In another sophisticated attack, the Anatsa trojan was found to create overlays on top of legitimate banking apps. When users opened their banking app and entered their credentials, the malware captured the information in real-time and sent it to the attackers.

Precautions and Recommendations

To mitigate the risk of falling victim to the Anatsa banking trojan, ngCERT advises users to avoid clicking on suspicious links, especially in unsolicited messages and emails. It is crucial to download apps only from trusted sources like the Google Play Store and avoid third-party app stores that may not vet apps for security. Regularly updating the device’s operating system and apps ensures that the latest security patches are in place. Using strong, unique passwords for banking apps and considering the use of a password manager can provide an added layer of security. Enabling two-factor authentication (2FA) on banking apps, where possible, is also recommended for enhanced protection.

The warning from ngCERT underscores the importance of vigilance and proactive measures in safeguarding personal financial information against the growing threat of cyberattacks. Users are encouraged to stay informed and take necessary steps to protect themselves from the Anatsa banking trojan and other similar threats.

 

Anthony Emeka Nwosu

Why humans should lead your business cybersecurity strategy

Why humans should lead your business cybersecurity strategy

 

 

How do you get staff on board with security? By making it personal, says Kevin Halkerd, Senior Risk & Security Analyst at e4.

 

Most successful cyber breaches have one thing in common: People. Your company can be protected from every tech angle, with the latest security updates and most advanced threat detection, but it takes just one employee accidentally sharing their password for a major breach to occur.

 

Human-targeted attacks will remain the number one threat to cyber security and will only keep increasing in volume and complexity this year. As even casual observers have become more adept at spotting emails that don’t look quite right, criminals constantly work at creating more sophisticated traps. This year, we’ll likely see more complex attacks as well as automation and the monetisation thereof, as bad actors leverage and repurpose the likes of ChatGPT and other AI chat tools.

 

Human error is not only the biggest security blind spot, but also requires more effort to remediate. It necessitates training and buy-in, as opposed to a security threat you might patch or reconfigure to a more secure mode. And after all that, your security still depends on the will of those humans to engage with the training and execute the learnings. There are no quick solutions, and any solution in place requires constant reviewing, reengagement, and reporting.

 

So how do you get staff members to engage in security messaging and implement these instructions correctly? By making it personal for and applicable to them.

 

South Africa already has a security-first culture due to our sensitivity to crime in general. Your toughest challenge is then to broaden the scope of staff members’ security mindset.

Do this by always providing consistent, friendly, and supportive engagement on security topics. If your security team can add value to other staff members’ lives, whether through support, personal advice, or leading by example, these quality exchanges will become a foundation for further interaction. If staff members perceive that they, too, get value out of engaging with security teams and materials, they’ll be more inclined to adopt your overall organisational strategy and awareness mission.

 

You could tailor such initiatives by:

Using strong awareness content about the threats most prevalent in your business to regularly keep security in focus.
Adding additional customised content to such materials to dig deeper and create interest in current trends.
Sharing ‘inside info’ such as vulnerability notices and remediation steps for consumer phones, tablets, and wireless routers that staff members may use in their personal lives.
Running routine unannounced simulations and sharing the results with the group.
Incentivising participation by rewarding star performers – but still supporting stragglers.

 

 

 

 

 

 

 

 

 

KnowBe4 2022 Phishing Test Report Confirms Business-Related Emails Trend

KnowBe4 2022 Phishing Test Report Confirms Business-Related Emails Trend

KnowBe4 releases overall 2022 and Q4 2022 global phishing test reports and finds business-related emails continue to be utilized as a phishing strategy and reveal top holiday email phishing subjects

Access Multimedia Content

TAMPA, United States of America, February 1, 2023/ — KnowBe4​ (www.KnowBe4.com), the provider of the world’s largest security awareness training and simulated phishing platform, announced the results of its 2022 and Q4 2022 top-clicked phishing report. The results include the top email subjects clicked in phishing tests, top attack vector types, holiday phishing email subjects and more insightful information that reveal the most popular phishing email tactics.​ ​

Phishing emails continue to be one of the most common and effective methods to maliciously impact a variety of organizations around the world – everyone is a potential victim. Cybercriminals constantly refine their strategies to outsmart end users and organizations by changing phishing email subjects to be more believable and attention grabbing. This shift in phishing tactics over time is evident in the increasing trend of cybercriminals using business-related email subjects.

Business phishing emails are lucrative and successful because of their potential to affect a user’s workday and routine. These include emails from HR, IT, managers and web services such as Google and Amazon. KnowBe4’s 2022 phishing test results reveal that for the year, nearly 50% of email subjects were HR related, while the other half were related to career development, IT and work project notifications. These types of emails bait recipients into opening them and are likely successful because they create a sense of urgency in users to act quickly, sometimes without thinking and taking the time to question the email’s legitimacy.​

Additionally, this year’s phishing tests revealed the top vector for the year to be phishing links in the body of an email, which has stayed consistent for the last three consecutive quarters. The combination of these phishing tactics is clearly a working strategy for cybercriminals but detrimental to users and organizations as they can lead to cyber attacks such as business email compromise and ransomware.

Along with an increased utilization of more business-related emails and links within emails, the Q4 2022 phishing test also shares the top holiday phishing email subjects. The holiday season is one of the busiest times of year for online activities and cybercriminals count on end users having their guards down when it comes to staying alert and spotting phishing emails. Like general phishing email subjects, holiday phishing email subjects consist of emails from HR and IT, however, they are also tailored to the holiday season and the festivities that typically happen during that time of the year by mentioning holiday parties, gifts, food and more.​

“Cybercriminals are smart and pay attention to what works and what does not when it comes to effective phishing emails,” said Stu Sjouwerman, CEO, KnowBe4. “This is why we see email subjects evolve and upgrade over time to keep up with end users and what they may be susceptible to. Phishing emails are a year-round threat and remain a challenge during the holiday season as well – holiday phishing emails are the one gift that no one wants to receive in their inbox. KnowBe4’s phishing test reports emphasize the importance of new-school security awareness training that educate users on the latest and most common cyber attacks and threats. A strong security culture and an educated workforce is an organization’s best defense to remain vigilant and stay safe online from cybercriminals and their attempted threats.”

To download a copy of the 2022 and the Q4 2022 KnowBe4 Phishing Infographics, visit here (https://bit.ly/3YfF7SU) and here (https://bit.ly/3XX2wZQ).

Protect against Business Email Compromise – or it may cost you dearly 

Protect against Business Email Compromise – or it may cost you dearly 

Don’t let your business be punished for, and by cyber fraud 

 

As the business landscape rapidly evolves, a general awareness of security vulnerabilities is no longer enough. Cyber fraud, data and payment breach risks need to be managed urgently and strategically with the right tools, says Ryan Mer, CEO at eftsure Africa, an automated Know Your Payee™ (KYP) platform provider.  

 

South African companies are facing a surge in Business Email Compromise (BEC) and other cyberattacks, exposing gaps in organisations’ payment systems with serious financial, reputational, and legal consequences. In January 2023, leading South African law firm, Edward Nathan Sonnenbergs (ENS) was ordered by the High Court in Johannesburg to pay R5.5 million including interest to a property buyer, Mrs. Judith Harwarden.

 

Evidence in the trial showed that ENS attached a PDF letter to an email addressed to Hawarden, containing its bank account details. However, the email was intercepted by criminals and bank details were changed before it reached Harwarden. Harwarden then paid R5.5 million into what she believed to be ENS’s bank account, which in fact was a separate account controlled by criminals.  

 

Mark Heyink, an attorney at Michalsons, who provided expert evidence at the trial explains: “The basis of the court’s judgement is that ENS owed a general duty of care to Harwarden. ENS was aware of the risk of Business Email Compromise and was in the best position to prevent the loss. The court found ENS information security was deficient and its staff poorly trained. ENS relied on the defence that the use of email and PDFs was a common practice by conveyancers, however, the court found that this did not excuse ENS from its duty of care to Harwarden.”

 

Conveyancing firms, their clients, and other organisations handling many large non-recurring type transactions are particularly vulnerable to BEC fraud. “All too aware of large deposits made to and from conveyancing firms, criminals target and intercept email accounts and scam victims into making payments into the incorrect account,” says Mer.  

 

Mer adds that with strong case precedence for South African firms being liable for payments that do not reach the intended account as a result of fraudulent interference, organisations need to handle email correspondence containing bank details and personal information with care. “Most threats can be avoided with the correct operational and financial controls as well as server, IT, and email monitoring processes. It’s important to acknowledge the fact that employee email accounts are gateways to sensitive information and attacks, and organisations should therefore enforce policies restricting what information can be kept in email inboxes prior to secure archiving. To help minimise the risk of BEC attacks, firms should re-evaluate their manual email-based processes and consider software solutions to digitise, automate and safeguard these processes, as well as the financial controls in place when it comes to payments by considering the use of independent real-time verification systems that cross-reference payments an organisation is about to release with independently verified bank account details,” he says.  

 

Business Email Compromise is a significant threat to any organisation and its clients. In circumstances where organisations are unable to meet their financial obligations as a result of a BEC attack, third parties may seek compensation for disrupted business operations and other losses. Heyink says that the Protection of Personal Information Act requires businesses to safeguard personal information appropriately. “While the ENS case relates to a conveyancing transaction, the principle applies to all businesses. If a business processes or communicates personal or sensitive business information, it must safeguard the information appropriately,” notes Heyink.  

 

Ends.

CYBER SECURITY: ZORACOMS’ NSOC CENTER AS A GAME-CHANGER IN THE NIGERIAN IT SPACE

CYBER SECURITY: ZORACOMS’ NSOC CENTER AS A GAME-CHANGER IN THE NIGERIAN IT SPACE

 

In a constantly evolving digital world that is fast paced, many organizations today are going fully digital or virtual. These processes have been known to deepen corporate organizations productivity and business continuity, but there are snags such as exposure and cyber threat. Criminals today are constantly evolving and finding new ways to breach the virtual and digital security infrastructures of organizations and individuals. These breaches cost as much as bullions of dollars in damages and loses when it has to get to fintechs and , identity firms other financial institutions. Having seen this loophole in the ecosystem in the area of having skilled manpower to monitor, abate and proactive these cyber threat, Zora Communications, an indigenous information technology (IT) firm Located in Lekki Area of Lagos recently launched one of a kind facility that will offer public and private sector players the desired and required tools and manpower that will curb and reduce their virtual exposure to cyber threats. The facility known as NSOC center meaning Network & Security Operations Center.

The Network & Security Operations Center (NSOC). Zoracom’s Network and Security Operation Centre (NSOC) will provide unified command, control, communication, intelligence sharing and analysis capabilities to enable physical security of the key state assets which includes IT infrastructure, real-time monitoring of events happening across ICS/SCADA networks and provide dynamic decision support, incident reporting, workflow management and system monitoring capabilities. The Network and Security Operation Centre (NSOC) is equipped with state-of-the-art facility which serves as the cornerstone to consolidate our core services in Observability, Cybersecurity and Infrastructure management.

The NSOC center is coming at a time that youthful and tech adaptive population in the country is driving such a full digital adaption of their solution at a fast pace. With fast adaption of ePayment, eCommerce, online activities, there is need for many firms offering this solution to plug into the new Zora Communications NSOC center for full security that is hundred percent proactive with over 99.999% uptime.

The Nigerian IT space has grown rapidly and the dynamic industry that has seen significant growth in recent years. With a population of over 200 million people and a burgeoning middle class, Nigeria is a prime market for technology and digital innovation. The IT sector in Nigeria is diverse and includes a range of industries such as software development, ecommerce, cloud computing, mobile technology, and cybersecurity. In recent years, the sector has attracted significant investment from both local and international companies, and many startups have emerged as well. This are the things that inform the launch of NSOC center.

John Nwachukwu, the Chief Information/Executive Officer of ZORACOM Communication said “The life blood of any business is its network systems and as we all know, the digital landscape is constantly changing, and it is becoming increasingly difficult to protect against the various forms of cyberattacks that are targeting organization’s networks of all sizes. That is why Zoracom has invested in the latest technologies and strategies to ensure that we are always one step ahead of the hackers by setting up Our Network & Security Operations Center. Zoracom’s Network and Security Operation Centre (NSOC) will provide unified command, control, communication, intelligence sharing and analysis capabilities to enable physical security of the key state assets which includes IT infrastructure, real-time monitoring of events happening across ICS/SCADA networks and provide dynamic decision support, incident reporting, workflow management and system monitoring capabilities.”

“Our Network and Security Operation Centre (NSOC) is equipped with state-of-the-art facility which serves as the cornerstone to consolidate our core services in Observability, Cybersecurity and Infrastructure management… Zoracom as an organization, we invest a lot in training and development programs to build the skills of our employees/consultants, as well as offer competitive salaries and benefits packages to attract and retain top talent. We also work with educational institutions to promote cyber security programs and help develop the next generation of cyber security professionals. Furthermore, we also consider outsourcing some cyber security functions to specialized firms, additionally we leverage automation and artificial intelligence which helps alleviates some of the workload and improve efficiency, freeing up our cybersecurity professionals to focus on “, John concluded.

ANTHONY EMEKA NWOSU

ZORACOM TO LAUNCH NETWORK SECURITY OPERATION CENTRE

ZORACOM TO LAUNCH NETWORK SECURITY OPERATION CENTRE

As businesses are getting more digitalized today, with a lot of business processes going online and virtual, the need to rejig and strengthen the cyber security architecture becomes imminent for any business to survive globally, Nigeria inclusive. Breaches are commonplace today, costing corporate world billions of dollars to combat. In line with this narrative, ZORACOM, an indigenous information technology (IT) firm located in Lekki will be launching their Network/Security Operation Centre (NSOC). This is to ensure that corporate organizations in the country have access to world-class cyber-security solutions in a cozy environment manned by competent manpower.

Speaking on the intention of ZORACOM to unveil this facility, John Nwachukwu, one of the Chief  Executives Officer of ZORACOM opined” We believe in doing things right, we are looking at how to service our existing clients better and how we can improve. We have a full grasp of the importance of cyber-security and business continuity; we are here to ensure that organizations are fully protected from these breaches that occur on daily basis. We are going to launch this NSOC facility just to ensure that firms are safe in their cyber environment. “

“Being a Zoracom Ninja (Zoran) means learning and doing new things every day, that revolve around helping digital businesses in data collection and analysis to make informed profitable decisions. Remember, we are on the journey of automating businesses, aimed at increasing end use revenue, enhancing satisfaction, and innovating solutions for business success”, John added.

To be launched this December 20th, the facility will be one of a kind in the country and will be a turning point in the area of cyber security solutions and manpower.  The facility will be a testament of the leading position of ZORACOM as an IT and Cyber-Security solution provider.

Zora Communications Limited is a technology company, automating digital transformation for cybersecurity, cloud, network, and service management. Zoracom, apart from cybersecurity solutions offers Broadband Access Networks,   Mobile Networks(3G/UMTS, LTE/4G, 5G),LoRa Access Networks, Radio Networks(Point-to-Point),Optical/SDH, Ethernet, IP/MPLS Aggregation. Others are Optical, IP/MPLS Backbones, Security/Firewalls and Voice/Soft Switch

 

Anthony Nwosu

 

 

” We believe in doing things right, we are looking at how to service our existing clients better and how we can improve. We have a full grasp of the importance of cyber-security and business continuity; we are here to ensure that organizations are fully protected from these breaches that occur on daily basis. We are going to launch this NSOC facility just to ensure that firms are safe in their cyber environment. “

Staying safe on TikTok: how to avoid being scammed or hacked

Staying safe on TikTok: how to avoid being scammed or hacked

 

 

It’s the world’s number one social media platform, which also means it’s the biggest target for scammers, hackers and shady characters. 

Carey van Vlaanderen, CEO of ESET South Africa shares a few tips and insights on what to avoid to stay safe.

 

Launched in 2016, TikTok has 6.44 million active users currently in South Africa above the age of 18, which is no small feat in comparison to Facebook which has been running since 2006 with 24.20 million users in the country. With such a broad reach, scammers are never far behind. Cybercriminals are exceptionally creative with their tactics and always follow trends closely, often predicting change ahead of the masses in order to increase the likelihood of their scams being successful. However, scams are not the only dangers lurking on the popular video-sharing application, and users would do well to know how to stay safe while enjoying themselves. Given that it’s so easy to lose track of time scrolling the app, it’s not hard for scams to catch people off guard, which can cause them to lose money, their account, or even their reputation.

Top TikTok scams to be aware of and avoid

 

1.    Don’t be fooled by get-rich-quick and crypto scams

Is Elon Musk really going to give random web strangers a million dollars? Is a worldwide brand really going to give away a luxury vehicle just for following a new account? Unlikely. If it sounds too good to be true, it usually is. Con artists are known for luring people into their web of deceit with offers of huge reward for little effort. Cryptocurrencies have skyrocketed (and hit rock bottom) recently, so they remain a favourite topic for scammers when attempting to part unsuspecting people from their cash. Competitions and giveaways must be carefully scrutinised. Even if they’re not looking to scam you out of money, your personal information could be just as useful to a scammer looking to commit identity theft.

 

2.    Don’t click those TikTok phishing messages

A TikTok scam email or text is a message that goes out at random, like a typical phishing message, but with the intention of landing in a TikToker’s inbox. Such a message might purport to offer a verified badge, more followers, or even a brand sponsorship. Once the target clicks the link in the message, they will be redirected to a site requesting TikTok login credentials. If the user does not have two-factor authentication (2FA) enabled (which TikTok accounts do not, by default), the hackers can take complete control over the account and lock the owner out completely, using their login details.

3.    Don’t engage with bot accounts

Despite their best efforts, TikTok is still unfortunately rife with bot accounts that cleverly interact with users in a way that make the targeted users think they are chatting with a real person. These bots may ultimately ask victims for sensitive information or even suggest the victims be redirected to a site that is in fact a scam site attempting to phish information from them or install malware on their phones.

4.    Don’t get caught by TikTok scam apps

Fake accounts on TikTok often promote apps that are available to download. The problem is that these apps are also in fact fake. Some accounts will claim that specific paid-for apps can be downloaded free from certain third-party app stores. However, in an attempt to steal your information, these apps will actually install malware or adware onto your device. Avoid downloading any additional apps that do not come from an official app store.

5.    Don’t fall for fake celebrities

Some accounts attempt to impersonate real celebrities. They usually do this by duplicating the content of a celebrity’s account. This tactic is used to get as many followers as possible. Before the scammer is caught out and reported, they may use this account to promote further scams such as cryptocurrency investment scams. Alternatively, scammers use this account to gather as many followers as quickly as possible, and then switch to a personal account, so that they can exploit their now-high follower account by monetising or promoting other scams.

Staying safe on TikTok

While hacking into someone’s TikTok is challenging without being near the target’s phone and carrying out a spot of shoulder surfing, it is a good reminder to make sure that 2FA is turned on. This makes it harder for cybercriminals as they might be able to see the reset code sent to your mobile number (using spyware) but it’s unlikely they’ll have access to your second authenticating medium (email) as well.

 

Other important safety tips

  • Never share your login details with anyone: Like other platforms, TikTok will never contact you asking for your account details, password, one time passcode, or any other verification methods.
  • Make your account private: This means that the content you post on the account is not visible to anyone you do not know.
  • Only allow friends to send messages: Don’t accept messages from strangers. If you only accept messages from friends, you don’t have to worry about the intent behind their message.
  • Don’t suggest your account to others: Turning off “Suggest Your Account to Others” will keep your account from attracting random users you don’t know.  It will also stop your TikTok account from coming up in search engine results.
  • Don’t allow people to download your videos: There’s a feature that lets other users download the videos you share on your channel. Turning this off helps ensure that no one uses your content, image, or identity in a way you wouldn’t want it to be used.
  • Limit comments: Cyberbullying is a huge safety issue these days, and it can happen to anyone. By disabling comments, you can ensure that no one uses your platform to say unkind or hurtful things to you or anyone else.

 

Finally, if you ever see videos on TikTok that you think could be spam or phishing attempts, or you see any harmful content, report it to TikTok straight away and avoid the associated links or accounts.