Cyber attacks are expected to rise over the coming month as Christmas online shopping gets under way.
Experts have warned that cybercrime is likely to increase as more people prioritise online shopping over in-store purchases due to the Covid-19 pandemic.
People must be on full alert and become “cyber fit” to protect themselves from the threat posed by cybercriminals in the run-up to the New Year.
Seasonal themed email-based attacks are likely to be high during this festive period
“Seasonal themed email-based attacks are likely to be high during this festive period,” said Vijay Chandnani, executive director of Techware Services and Solutions.
“You have Diwali and Christmas in quick succession. As the festive season approaches, buying trends today are more tilted towards e-commerce and online shopping rather than in-store purchases.
“Attacks on individual shoppers are likely to be higher, especially now that more people are working remotely during the pandemic and some are not on secure networks. I would not be surprised if the attacks are 10-15 per cent higher this year.”
The UAE has already reported a significant increase in the number of cyber attacks since the pandemic began.
Dubai Future Foundation said there was a 600 per cent increase in the number of phishing emails that hoped to lure users into giving up sensitive data from February to June.
The National spoke to a number of cyber security experts who offered readers tips to help keep the online criminals at bay.
Set strong and varied passwords
Strong passwords are key when keeping personal data safe, said Candid Wüest, vice president of tech firm Acronis.
“You need to use a strong password and have a different one for each service that you have,” he said.
“Don’t use the same password that you would use on your Twitter account for your email account or online banking.
“If you cannot remember all the different passwords then make use of a password manager, there are many free apps on phones and laptops that you can use for this.”
Look out for dodgy emails
He said consumers needed to be fully alert when receiving emails with offers that seemed too good to resist.
“You have to be vigilant and be cyber fit and by that I mean you need to show good judgment when you getting an email with a deal that’s too good to be true,” he said.
“You can’t let greed cloud your better judgment and think twice before responding with personal information.”
Some of the most popular scams at the moment from cybercriminals are offers involving the latest model of the iPhone and the new PlayStation 5.
Mr Wüest said his company had noticed a 400 per cent increase in the number of remote desktop protocol cyber attacks in Q2 of 2020, compared to the same period in 2019.
These attacks, if successful, allow criminals to access a computer and operate Windows on a device in another location.
“We are expecting to see those numbers increase over Christmas as there will be even more people shopping online,” he said.
Be mindful of your Wi-Fi connection
Mr Wüest urged consumers to be careful about which Wi-Fi connection they use when making online transactions.
“If you are on a public Wi-Fi like in a mall or an airport don’t do anything sensitive like banking as a lot of these networks can be compromised,” he said.
“It’s a lot safer to do it through the 4G on your mobile phone or use a VPN.
“It might even be better to wait a few minutes and just do it at home.”
Other experts said there were a number of methods people could use to reduce the risk of being scammed by cybercriminals.
Use a credit card, not a debit card
“I would recommend not purchasing any merchandise online with a debit card and minimise any direct credit card usage,” said Morey Haber, chief technical officer with BeyondTrust.
“Make online purchases with a third party proxy like PayPal or Apple Pay that is linked to a credit card or debit card to provide an extra layer of financial protection.
“I would also recommend not allowing the merchant to save your payment information for future usage.”
How an individual pays for their transactions online is another crucial factor in minimising the likelihood of falling foul of cyber crime.
Consider using a mobile app
“Something that consumers don’t realise is that websites are not as secure as mobile apps,” said Matt Walmsley, director for the EMEA region with tech company Vectra.
The FBI put out a warning in the US last year about e-skimming. This involves attackers hacking websites of prominent retailers and compromising the back end to steal consumer credit card information.
“That is a problem with websites but not in mobile apps,” said Mr Walmsley.
“So, in so much as is possible, use retailer mobile apps for online shopping.”
Look out for fake websites
Cybercriminals are also stepping up their efforts by creating fake websites that appear to belong to popular international retailers, hoping to trick consumers into entering sensitive personal details.
“Cybercriminals create a copy of a web page that looks exactly like the landing page of popular streaming platforms and retailers,” said Maher Yamout, senior security researcher with Kaspersky.
“Sometimes, cybercriminals also create new landing pages that provide users with free access in exchange for their credentials or bank account details.
“To an untrained eye, they will not be able to distinguish between a legitimate website and one disguised as a phishing website.
“Internet users must stay vigilant while browsing the internet for their favourite TV shows or buying things online,” he added.
COMPANY PROFILE
Name: HyperSpace
Started: 2020
Founders: Alexander Heller, Rama Allen and Desi Gonzalez
Based: Dubai, UAE
Sector: Entertainment
Number of staff: 210
Investment raised: $75 million from investors including Galaxy Interactive, Riyadh Season, Sega Ventures and Apis Venture Partners
Where to donate in the UAE
The Emirates Charity Portal
You can donate to several registered charities through a “donation catalogue”. The use of the donation is quite specific, such as buying a fan for a poor family in Niger for Dh130.
The General Authority of Islamic Affairs & Endowments
The site has an e-donation service accepting debit card, credit card or e-Dirham, an electronic payment tool developed by the Ministry of Finance and First Abu Dhabi Bank.
Al Noor Special Needs Centre
You can donate online or order Smiles n’ Stuff products handcrafted by Al Noor students. The centre publishes a wish list of extras needed, starting at Dh500.
Beit Al Khair Society
Beit Al Khair Society has the motto “From – and to – the UAE,” with donations going towards the neediest in the country. Its website has a list of physical donation sites, but people can also contribute money by SMS, bank transfer and through the hotline 800-22554.
Dar Al Ber Society
Dar Al Ber Society, which has charity projects in 39 countries, accept cash payments, money transfers or SMS donations. Its donation hotline is 800-79.
Dubai Cares
Dubai Cares provides several options for individuals and companies to donate, including online, through banks, at retail outlets, via phone and by purchasing Dubai Cares branded merchandise. It is currently running a campaign called Bookings 2030, which allows people to help change the future of six underprivileged children and young people.
Emirates Airline Foundation
Those who travel on Emirates have undoubtedly seen the little donation envelopes in the seat pockets. But the foundation also accepts donations online and in the form of Skywards Miles. Donated miles are used to sponsor travel for doctors, surgeons, engineers and other professionals volunteering on humanitarian missions around the world.
Emirates Red Crescent
On the Emirates Red Crescent website you can choose between 35 different purposes for your donation, such as providing food for fasters, supporting debtors and contributing to a refugee women fund. It also has a list of bank accounts for each donation type.
Gulf for Good
Gulf for Good raises funds for partner charity projects through challenges, like climbing Kilimanjaro and cycling through Thailand. This year’s projects are in partnership with Street Child Nepal, Larchfield Kids, the Foundation for African Empowerment and SOS Children's Villages. Since 2001, the organisation has raised more than $3.5 million (Dh12.8m) in support of over 50 children’s charities.
Noor Dubai Foundation
Sheikh Mohammed bin Rashid Al Maktoum launched the Noor Dubai Foundation a decade ago with the aim of eliminating all forms of preventable blindness globally. You can donate Dh50 to support mobile eye camps by texting the word “Noor” to 4565 (Etisalat) or 4849 (du).
Ten tax points to be aware of in 2026
1. Domestic VAT refund amendments: request your refund within five years
If a business does not apply for the refund on time, they lose their credit.
2. E-invoicing in the UAE
Businesses should continue preparing for the implementation of e-invoicing in the UAE, with 2026 a preparation and transition period ahead of phased mandatory adoption.
3. More tax audits
Tax authorities are increasingly using data already available across multiple filings to identify audit risks.
4. More beneficial VAT and excise tax penalty regime
Tax disputes are expected to become more frequent and more structured, with clearer administrative objection and appeal processes. The UAE has adopted a new penalty regime for VAT and excise disputes, which now mirrors the penalty regime for corporate tax.
5. Greater emphasis on statutory audit
There is a greater need for the accuracy of financial statements. The International Financial Reporting Standards standards need to be strictly adhered to and, as a result, the quality of the audits will need to increase.
6. Further transfer pricing enforcement
Transfer pricing enforcement, which refers to the practice of establishing prices for internal transactions between related entities, is expected to broaden in scope. The UAE will shortly open the possibility to negotiate advance pricing agreements, or essentially rulings for transfer pricing purposes.
7. Limited time periods for audits
Recent amendments also introduce a default five-year limitation period for tax audits and assessments, subject to specific statutory exceptions. While the standard audit and assessment period is five years, this may be extended to up to 15 years in cases involving fraud or tax evasion.
8. Pillar 2 implementation
Many multinational groups will begin to feel the practical effect of the Domestic Minimum Top-Up Tax (DMTT), the UAE's implementation of the OECD’s global minimum tax under Pillar 2. While the rules apply for financial years starting on or after January 1, 2025, it is 2026 that marks the transition to an operational phase.
9. Reduced compliance obligations for imported goods and services
Businesses that apply the reverse-charge mechanism for VAT purposes in the UAE may benefit from reduced compliance obligations.
10. Substance and CbC reporting focus
Tax authorities are expected to continue strengthening the enforcement of economic substance and Country-by-Country (CbC) reporting frameworks. In the UAE, these regimes are increasingly being used as risk-assessment tools, providing tax authorities with a comprehensive view of multinational groups’ global footprints and enabling them to assess whether profits are aligned with real economic activity.
Contributed by Thomas Vanhee and Hend Rashwan, Aurifer
The National in Davos
We are bringing you the inside story from the World Economic Forum's Annual Meeting in Davos, a gathering of hundreds of world leaders, top executives and billionaires.