Cyber criminals use social engineering techniques in fake emails or texts from a trusted source to dupe victims. Photo: Science Photo Library
Cyber criminals use social engineering techniques in fake emails or texts from a trusted source to dupe victims. Photo: Science Photo Library
Cyber criminals use social engineering techniques in fake emails or texts from a trusted source to dupe victims. Photo: Science Photo Library
Cyber criminals use social engineering techniques in fake emails or texts from a trusted source to dupe victims. Photo: Science Photo Library

Phishing email threats in the UAE surged 77% last quarter, Kaspersky says


Alvin R Cabral
  • English
  • Arabic

The UAE recorded a steep increase in the number of emails that contain phishing threats in the second quarter of 2023.

With the volume of such mails increasing by 77 per cent quarter over quarter, a new report from Kaspersky suggests that these illicit tactics are becoming more sophisticated.

The figure is a significant jump with phishing emails using mainly four methods, the cybersecurity company said in the study released on Wednesday.

These methods, which are prevalent in the Middle East, Turkey and Africa region, include mails involving undelivered parcels, know-your-customer messages, free money and unusual email login activity.

These tactics are known as social engineering techniques, which are built on how people think and act. In the case of electronic communications, it involves an email or text message pretending to be from a trusted source.

They are part of the broader scope of spam emails, which carry potentially more than one threat – malware and ransomware among the most notable – and pose significant danger to users, be they individuals or enterprises.

Spam emails are unsolicited messages sent in bulk that potentially carry malicious content, while phishing involves fake emails that appear to be from a reputable source with the aim of securing personal information, such as passwords and credit card numbers.

Emails about undelivered parcels, in particular, increased greatly in the UAE this year.

In January, the Telecommunications and Digital Government Regulatory Authority warned consumers to be alert for unexpected text messages that appear to be from well-known courier companies, including Emirates Post, Aramex and DHL Express, as they could be phishing scams.

Etisalat by e&, the UAE's biggest telecoms operator, and Dubai Police issued similar warnings this year over fake rewards and bogus fine payments, respectively.

"Once a cybercriminal understands what motivates an individual’s actions, they try to exploit their lack of knowledge and manipulate their behaviour to meet the end goal," Kaspersky said in Wednesday's report.

Cybersecurity attacks can cause reputational and financial damages to individuals and companies. The global average for a data breach in 2022 was $4.35 million, up from $4.24 million the previous year, according to the latest edition of IBM's Cost of a Data Breach report.

IBM's study included exploits resulting from emails that are of the spam, phishing, malware and ransomware types, among several other threats.

Last year, nearly half of all emails worldwide were spam, which was a more than 3 per cent increase over 2021, Kaspersky said in its spam and phishing report for 2022.

Spam and phishing attacks soared in 2021 as cyber criminals lured users by focusing on topics related to lucrative investments, online streaming of box-office hits including the James Bond film No Time to Die, and themes related to the pandemic, Kaspersky said previously.

In 2022, the trend continued, this time with threat actors using the new season of Netflix's Stranger Things, The Batman movie, Academy Awards and the Fifa World Cup in Qatar as a cover for their illegal operations, the company said.

“There is no aspect of our life that cyber criminals cannot exploit. Human behaviour and emotion is no exception," Maher Yamout, lead security researcher at Kaspersky, wrote in the report.

The four methods meant in the latest study are all incredibly dangerous. The free money technique is a long-running scam that tries to convince users to provide sensitive details to receive a cash deposit.

The KYC tactic, meanwhile, involves bogus messages posing as prominent banks requesting people to complete verification to comply with financial regulations or avoid suspension of transactions, while unusual email account log-in activity techniques flag false sign-in activity that prompts a user to report the activity via a link.

In all cases, cyber criminals are trying to manipulate user emotions, including by using terms such as urgent, trying to instil fear in them, or entice them so that they will be coerced to fall victim to these tactics.

"These scams are a result of manipulation based on fear, curiosity and greed. The key takeaway is to pay attention to basic details in emails before responding, even if they are from trusted sources, because one wrong click can lead to harsh consequences," the report said.

Biography

Favourite book: Zen and the Art of Motorcycle Maintenance

Holiday choice: Anything Disney-related

Proudest achievement: Receiving a presidential award for foreign services.

Family: Wife and three children.

Like motto: You always get what you ask for, the universe listens.

What the law says

Micro-retirement is not a recognised concept or employment status under Federal Decree Law No. 33 of 2021 on the Regulation of Labour Relations (as amended) (UAE Labour Law). As such, it reflects a voluntary work-life balance practice, rather than a recognised legal employment category, according to Dilini Loku, senior associate for law firm Gateley Middle East.

“Some companies may offer formal sabbatical policies or career break programmes; however, beyond such arrangements, there is no automatic right or statutory entitlement to extended breaks,” she explains.

“Any leave taken beyond statutory entitlements, such as annual leave, is typically regarded as unpaid leave in accordance with Article 33 of the UAE Labour Law. While employees may legally take unpaid leave, such requests are subject to the employer’s discretion and require approval.”

If an employee resigns to pursue micro-retirement, the employment contract is terminated, and the employer is under no legal obligation to rehire the employee in the future unless specific contractual agreements are in place (such as return-to-work arrangements), which are generally uncommon, Ms Loku adds.

ASIAN%20RUGBY%20CHAMPIONSHIP%202024
%3Cp%3E%3Cstrong%3EResults%3C%2Fstrong%3E%3Cbr%3EHong%20Kong%2052-5%20UAE%3Cbr%3ESouth%20Korea%2055-5%20Malaysia%3Cbr%3EMalaysia%206-70%20Hong%20Kong%3Cbr%3EUAE%2036-32%20South%20Korea%3Cbr%3E%3Cbr%3E%3Cstrong%3EFixtures%3C%2Fstrong%3E%3Cbr%3EFriday%2C%20June%2021%2C%207.30pm%20kick-off%3A%20UAE%20v%20Malaysia%3Cbr%3EAt%20The%20Sevens%2C%20Dubai%20(admission%20is%20free).%3Cbr%3ESaturday%3A%20Hong%20Kong%20v%20South%20Korea%3Cbr%3E%3C%2Fp%3E%0A
Key features of new policy

Pupils to learn coding and other vocational skills from Grade 6

Exams to test critical thinking and application of knowledge

A new National Assessment Centre, PARAKH (Performance, Assessment, Review and Analysis for Holistic Development) will form the standard for schools

Schools to implement online system to encouraging transparency and accountability

Company profile

Name: Thndr

Started: October 2020

Founders: Ahmad Hammouda and Seif Amr

Based: Cairo, Egypt

Sector: FinTech

Initial investment: pre-seed of $800,000

Funding stage: series A; $20 million

Investors: Tiger Global, Beco Capital, Prosus Ventures, Y Combinator, Global Ventures, Abdul Latif Jameel, Endure Capital, 4DX Ventures, Plus VC,  Rabacap and MSA Capital

Shubh Mangal Saavdhan
Directed by: RS Prasanna
Starring: Ayushmann Khurrana, Bhumi Pednekar

Ten tax points to be aware of in 2026

1. Domestic VAT refund amendments: request your refund within five years

If a business does not apply for the refund on time, they lose their credit.

2. E-invoicing in the UAE

Businesses should continue preparing for the implementation of e-invoicing in the UAE, with 2026 a preparation and transition period ahead of phased mandatory adoption. 

3. More tax audits

Tax authorities are increasingly using data already available across multiple filings to identify audit risks. 

4. More beneficial VAT and excise tax penalty regime

Tax disputes are expected to become more frequent and more structured, with clearer administrative objection and appeal processes. The UAE has adopted a new penalty regime for VAT and excise disputes, which now mirrors the penalty regime for corporate tax.

5. Greater emphasis on statutory audit

There is a greater need for the accuracy of financial statements. The International Financial Reporting Standards standards need to be strictly adhered to and, as a result, the quality of the audits will need to increase.

6. Further transfer pricing enforcement

Transfer pricing enforcement, which refers to the practice of establishing prices for internal transactions between related entities, is expected to broaden in scope. The UAE will shortly open the possibility to negotiate advance pricing agreements, or essentially rulings for transfer pricing purposes. 

7. Limited time periods for audits

Recent amendments also introduce a default five-year limitation period for tax audits and assessments, subject to specific statutory exceptions. While the standard audit and assessment period is five years, this may be extended to up to 15 years in cases involving fraud or tax evasion. 

8. Pillar 2 implementation 

Many multinational groups will begin to feel the practical effect of the Domestic Minimum Top-Up Tax (DMTT), the UAE's implementation of the OECD’s global minimum tax under Pillar 2. While the rules apply for financial years starting on or after January 1, 2025, it is 2026 that marks the transition to an operational phase.

9. Reduced compliance obligations for imported goods and services

Businesses that apply the reverse-charge mechanism for VAT purposes in the UAE may benefit from reduced compliance obligations. 

10. Substance and CbC reporting focus

Tax authorities are expected to continue strengthening the enforcement of economic substance and Country-by-Country (CbC) reporting frameworks. In the UAE, these regimes are increasingly being used as risk-assessment tools, providing tax authorities with a comprehensive view of multinational groups’ global footprints and enabling them to assess whether profits are aligned with real economic activity. 

Contributed by Thomas Vanhee and Hend Rashwan, Aurifer

What is dialysis?

Dialysis is a way of cleaning your blood when your kidneys fail and can no longer do the job.

It gets rid of your body's wastes, extra salt and water, and helps to control your blood pressure. The main cause of kidney failure is diabetes and hypertension.

There are two kinds of dialysis — haemodialysis and peritoneal.

In haemodialysis, blood is pumped out of your body to an artificial kidney machine that filter your blood and returns it to your body by tubes.

In peritoneal dialysis, the inside lining of your own belly acts as a natural filter. Wastes are taken out by means of a cleansing fluid which is washed in and out of your belly in cycles.

It isn’t an option for everyone but if eligible, can be done at home by the patient or caregiver. This, as opposed to home haemodialysis, is covered by insurance in the UAE.

The%C2%A0specs%20
%3Cp%3E%3Cstrong%3EEngine%3A%20%3C%2Fstrong%3E4.4-litre%2C%20twin-turbo%20V8%0D%3Cbr%3E%3Cstrong%3ETransmission%3A%20%3C%2Fstrong%3Eeight-speed%20auto%0D%3Cbr%3E%3Cstrong%3EPower%3A%20%3C%2Fstrong%3E617hp%0D%3Cbr%3E%3Cstrong%3ETorque%3A%20%3C%2Fstrong%3E750Nm%0D%3Cbr%3E%3Cstrong%3EPrice%3A%20%3C%2Fstrong%3Efrom%20Dh630%2C000%0D%3Cbr%3E%3Cstrong%3EOn%20sale%3A%20%3C%2Fstrong%3Enow%3C%2Fp%3E%0A
SPECS
%3Cp%3EEngine%3A%20Supercharged%203.5-litre%20V6%0D%3Cbr%3EPower%3A%20400hp%0D%3Cbr%3ETorque%3A%20430Nm%0D%3Cbr%3EOn%20sale%3A%20Now%0D%3Cbr%3EPrice%3A%20From%20Dh450%2C000%0D%3Cbr%3E%3C%2Fp%3E%0A
Citadel: Honey Bunny first episode

Directors: Raj & DK

Stars: Varun Dhawan, Samantha Ruth Prabhu, Kashvi Majmundar, Kay Kay Menon

Rating: 4/5

How to watch Ireland v Pakistan in UAE

When: The one-off Test starts on Friday, May 11
What time: Each day’s play is scheduled to start at 2pm UAE time.
TV: The match will be broadcast on OSN Sports Cricket HD. Subscribers to the channel can also stream the action live on OSN Play.

Key facilities
  • Olympic-size swimming pool with a split bulkhead for multi-use configurations, including water polo and 50m/25m training lanes
  • Premier League-standard football pitch
  • 400m Olympic running track
  • NBA-spec basketball court with auditorium
  • 600-seat auditorium
  • Spaces for historical and cultural exploration
  • An elevated football field that doubles as a helipad
  • Specialist robotics and science laboratories
  • AR and VR-enabled learning centres
  • Disruption Lab and Research Centre for developing entrepreneurial skills
GAC GS8 Specs

Engine: 2.0-litre 4cyl turbo

Power: 248hp at 5,200rpm

Torque: 400Nm at 1,750-4,000rpm

Transmission: 8-speed auto

Fuel consumption: 9.1L/100km

On sale: Now

Price: From Dh149,900

Mercer, the investment consulting arm of US services company Marsh & McLennan, expects its wealth division to at least double its assets under management (AUM) in the Middle East as wealth in the region continues to grow despite economic headwinds, a company official said.

Mercer Wealth, which globally has $160 billion in AUM, plans to boost its AUM in the region to $2-$3bn in the next 2-3 years from the present $1bn, said Yasir AbuShaban, a Dubai-based principal with Mercer Wealth.

Within the next two to three years, we are looking at reaching $2 to $3 billion as a conservative estimate and we do see an opportunity to do so,” said Mr AbuShaban.

Mercer does not directly make investments, but allocates clients’ money they have discretion to, to professional asset managers. They also provide advice to clients.

“We have buying power. We can negotiate on their (client’s) behalf with asset managers to provide them lower fees than they otherwise would have to get on their own,” he added.

Mercer Wealth’s clients include sovereign wealth funds, family offices, and insurance companies among others.

From its office in Dubai, Mercer also looks after Africa, India and Turkey, where they also see opportunity for growth.

Wealth creation in Middle East and Africa (MEA) grew 8.5 per cent to $8.1 trillion last year from $7.5tn in 2015, higher than last year’s global average of 6 per cent and the second-highest growth in a region after Asia-Pacific which grew 9.9 per cent, according to consultancy Boston Consulting Group (BCG). In the region, where wealth grew just 1.9 per cent in 2015 compared with 2014, a pickup in oil prices has helped in wealth generation.

BCG is forecasting MEA wealth will rise to $12tn by 2021, growing at an annual average of 8 per cent.

Drivers of wealth generation in the region will be split evenly between new wealth creation and growth of performance of existing assets, according to BCG.

Another general trend in the region is clients’ looking for a comprehensive approach to investing, according to Mr AbuShaban.

“Institutional investors or some of the families are seeing a slowdown in the available capital they have to invest and in that sense they are looking at optimizing the way they manage their portfolios and making sure they are not investing haphazardly and different parts of their investment are working together,” said Mr AbuShaban.

Some clients also have a higher appetite for risk, given the low interest-rate environment that does not provide enough yield for some institutional investors. These clients are keen to invest in illiquid assets, such as private equity and infrastructure.

“What we have seen is a desire for higher returns in what has been a low-return environment specifically in various fixed income or bonds,” he said.

“In this environment, we have seen a de facto increase in the risk that clients are taking in things like illiquid investments, private equity investments, infrastructure and private debt, those kind of investments were higher illiquidity results in incrementally higher returns.”

The Abu Dhabi Investment Authority, one of the largest sovereign wealth funds, said in its 2016 report that has gradually increased its exposure in direct private equity and private credit transactions, mainly in Asian markets and especially in China and India. The authority’s private equity department focused on structured equities owing to “their defensive characteristics.”

Updated: August 23, 2023, 2:27 PM