Nihka Technology Group warns of sophisticated executive impersonation scam

Businesses must implement comprehensive security measures. (Image: Supplied)

---

Nihka Technology Group, a pioneering black woman-owned IT services company, has identified a concerning new cyber scam targeting South African businesses.

The sophisticated scheme uses legitimate employee names to deceive companies into accessing fraudulent websites, putting sensitive data and financial assets at risk.

The cyber security leader warns that while this impersonation scam specifically targets businesses, individuals within organisations are equally vulnerable to the fraud. Abdul Moosa, Chief Technology Officer at Nihka Technology Group, details the deceptive nature of these attacks: "These fraudulent e-mails contain urgent requests with links to supposedly verify account details or review important documents. They appear to come from actual company executives and include real employee names and contact details in the signatures. However, upon closer inspection, subtle variations in e-mail domains reveal their fraudulent nature."

This latest threat represents a new evolution in the sophisticated phishing attempts observed during the final quarter of 2024. The scammers have diversified their tactics, sending requests for urgent wire transfers to supposed new supplier accounts and notifications of pending legal action requiring immediate response.

Some messages alert recipients about account suspensions requiring verification, while others request confidential employee or customer data. The cyber criminals have even begun crafting fake security alerts that demand immediate action through provided links, all while impersonating company executives or financial officers.

To combat this growing threat, Nihka Technology Group strongly advises businesses to implement comprehensive security measures. Organisations should verify all unexpected requests from executives through alternative communication channels and exercise extreme caution with links or attachments from unexpected e-mails, even when they appear to be from known contacts. Moosa emphasises the importance of scrutinising e-mail domains carefully, noting that scammers often employ domains that appear strikingly similar to legitimate ones.

"Our AI-powered threat detection systems have observed a significant uptick in these sophisticated impersonation attempts," Moosa explains. "What makes them particularly dangerous is their exploitation of established business hierarchies and human psychology rather than technical vulnerabilities. The attackers understand and abuse the natural inclination to respond quickly to authority figures."

Nihka Technology Group emphasises several critical points about legitimate business communications. Genuine companies will never request sensitive information via e-mail, send unexpected links to verify account details or create artificial urgency for financial transactions. Furthermore, legitimate enterprises do not use threats of legal action or account suspension to prompt immediate action.

As part of its commitment to cyber security awareness and protection, Nihka offers free initial consultations to businesses concerned about their vulnerability to such attacks. The company provides comprehensive cyber security assessments, employee training programmes and advanced threat detection solutions specifically designed to combat sophisticated phishing attempts. These services are tailored to address the evolving landscape of cyber threats, with a particular focus on the human element of security.

Moosa concludes with a call to action: "In today's digital landscape, vigilance is not optional – it's imperative. We urge all businesses to treat unexpected urgent requests with appropriate scepticism and to implement robust verification protocols. Our team stands ready to assist organisations in fortifying their defences against these increasingly sophisticated threats."

For media enquiries, please contact Lwazi Nongauza (+27) 74 461 9084.