News
Mobile Devices Targeted as Cyberattacks Increase by 13%
Research from European managed security services provider Orange Cyberdefense has revealed a 13% increase in cyberattacks on enterprises over the past 12 months, with a rise in ransomware incidents and, for the first time, a noticeable wave of attacks against mobile devices.
This is according to the Orange Security Navigator 2022, which provides a detailed analysis of more than 50 billion security events analysed daily over the past year (October 2020 to October 2021) by Orange Cyberdefense’s 18 Security Operation Centres (SOCs) and 14 CyberSOCs across the globe.
Of the 94,806 incidents flagged as being potential threats, analyst investigation confirmed 34,156 (36%) to be legitimate security incidents – a 13% increase on the year before.
More than a third (38%) of all confirmed security incidents were classified as malware, including ransomware – an increase of 18% on 2020.
The report found that almost two thirds (64%) of the security alerts dealt with by Orange Cyberdefense analysts turned out to be ‘noise’ and did not represent a genuine threat – an increase of 5% on the previous year.
The findings suggest that many organisations, particularly small and medium sized businesses, will require more resources to filter this massive amount of data for potential threats. The risk is that these businesses will become increasingly vulnerable to attack as the level and volume of activity continues to rise.
The Security Navigator also reports that mobile operating systems like iOS and Android in a business context are an increasingly popular target for exploits. Many of the activities appear to be related to commercial companies contracted by law enforcement and intelligence agencies.
However, the vulnerabilities and exploits developed will likely not stay in that realm, but have in the past and will likely in the future find their way into the criminal ecosystem as well (mind the WannaCry attack of 2017).
Orange Cyberdefense predicts attacks targeting mobile devices are likely to continue on this upward trajectory. This is a development that security professionals will need to pay closer attention to.
Mobile platforms are key in modern access protection concepts, namely multi-factor authentication (MFA), which is commonly used in corporate environments to protect cloud access for instance.
Another key finding of the new Security Navigator is that malware, including ransomware, was the most common type of threat reported across the analysis period, with 38% of all confirmed security incidents classified as malware – an increase of 18% on 2020.
Among the key malware trends are:
- A decrease in confirmed downloader activity (malware that downloads and runs other malware on affected systems) in November and December 2020 after the Trickbot botnet was taken down by law enforcement, and in January and February 2021, directly after Emotet was taken down;
- An inverse correlation between the stringency of Covid-19 lockdowns and the volumes of downloader and ransomware activity: the more stringent the lockdowns, the less of this activity, running contrary to the prevailing narrative that attacks increase when users work from home;
- Large organisations see more than double (43%) the amount of confirmed malware incidents than medium-sized businesses.
Hugues Foulon, CEO of Orange Cyberdefense, said: “Attacks like Solorigate show that even trusted software from reliable vendors can turn into a trojan horse for cunning attackers. Technology alone cannot be the solution to this problem.
As our data shows, we have seen a 13% increase in the number of incidents in just one year, and these incidents keep increasing year on year.
A large proportion of the tech-driven security alerts that our analysts deal with are just noise but this puts a tremendous strain on already stretched IT and security teams. Indeed, not all businesses have the means or resources to employ managed security services providers to help them sift through the ‘noise’ and find the actionable security ‘signals’. We thus believe that security technologies can, and must, do better.”
Federal Inland Revenue Service (FIRS) has announced that the National Identification Number (NIN) issued by the National Identity Management Commission (NIMC) will automatically serve as the Tax Identification Number (Tax ID) for all Nigerian citizens, while registered businesses will use their Corporate Affairs Commission (CAC) registration numbers.
FIRS
The disclosure was made during a public awareness campaign on the new tax laws posted on X (formerly Twitter) on Monday.
According to the Service, the Nigeria Tax Administration Act (NTAA), which comes into force in January 2026, mandates the use of Tax IDs for certain financial and commercial transactions, including bank account ownership.
FIRS explained that the measure is part of efforts to unify all previously issued Tax Identification Numbers (TINs) by both the federal and state revenue services into a single identifier.
“For individuals, your NIN automatically serves as your Tax ID, while for registered companies, your CAC RC number is used. You do not need a physical card; the Tax ID is a unique number linked directly to your identity,” the Service stated.
The agency noted that the requirement has been in place since the Finance Act of 2019 but has now been strengthened under the NTAA to ensure compliance and ease of administration.
Officials emphasized that the reform would simplify tax processes, reduce duplication, and improve transparency in Nigeria’s tax system.
The Service added that the integration of NIN and CAC numbers into the tax framework would also enhance data accuracy, curb tax evasion, and streamline the monitoring of taxable activities across the country.
Tax experts have described the development as a significant step toward modernizing Nigeria’s revenue administration, noting that it aligns with global best practices where national identity systems are linked to tax compliance.
The FIRS urged Nigerians to ensure that their NINs and CAC registration details are up-to-date, stressing that the identifiers would be required for transactions such as property purchases, contract awards, and access to certain financial services once the NTAA takes effect
The United States will begin a partial suspension of visa issuance to Nigerians from January 1, 2026, following a new presidential proclamation aimed at strengthening border and national security.
The US Mission in Nigeria announced on Monday that the restriction will take effect at 12:01 a.m. Eastern Standard Time in accordance with Presidential Proclamation 10998, titled ‘Restricting and Limiting the Entry of Foreign Nationals to Protect the Security of the United States.’
According to the mission, Nigeria is one of 19 countries affected by the measure.
Others listed are Angola, Antigua and Barbuda, Benin, Burundi, Cote d’Ivoire, Cuba, Dominica, Gabon, The Gambia, Malawi, Mauritania, Senegal, Tanzania, Togo, Tonga, Venezuela, Zambia and Zimbabwe.
The proclamation provides for a partial suspension of visa issuance covering nonimmigrant B-1/B-2 visitor visas, as well as F, M and J student and exchange visitor visas.
It also applies to immigrant visas, though with limited exceptions.
The statement read in part, “Effective January 1, 2026, at 12:01 a.m. EST, in line with Presidential Proclamation 10998 on “Restricting and Limiting the Entry of Foreign Nationals to Protect the Security of the United States,” the Department of State is partially suspending visa issuance to nationals of 19 countries – Angola, Antigua and Barbuda, Benin, Burundi, Cote D’Ivoire, Cuba, Dominica, Gabon, The Gambia, Malawi, Mauritania, Nigeria, Senegal, Tanzania, Togo, Tonga, Venezuela, Zambia, and Zimbabwe – for nonimmigrant B-1/B-2 visitor visas and F, M, J student and exchange visitor visas, and all immigrant visas with limited exceptions.”
US officials clarified that the policy does not apply to all travellers. Exemptions include immigrant visas for ethnic and religious minorities facing persecution in Iran, dual nationals applying with passports from countries not affected by the suspension, and Special Immigrant Visas for eligible US government employees.
Other exempted categories include lawful permanent residents of the United States and participants in certain major international sporting events.
The US government emphasised that the proclamation applies only to foreign nationals who are outside the United States on the effective date and who do not hold a valid US visa as of January 1, 2026.
“Foreign nationals, even those outside the United States, who hold valid visas as of the effective date are not subject to Presidential Proclamation 10998. No visas issued before January 1, 2026, at 12:01 a.m. EST, have been or will be revoked pursuant to the Proclamation,” the statement added.
Visa applicants from affected countries may continue to submit applications and attend interviews. However, the US Mission noted that such applicants “may be ineligible for visa issuance or admission to the US” under the new rules.
The announcement comes amid a series of recent US policy decisions that have raised concerns among Nigerians seeking to travel, study or migrate to the country.
In October, the United States added Nigeria back to its list of countries accused of violating religious freedom, citing persistent insecurity and attacks on Christian communities. This was followed by Nigeria’s inclusion on a revised US travel ban list that imposed partial entry restrictions on Nigerians.
The US has also tightened immigration and visa policies affecting Nigerians. Earlier this year, the validity of most non-immigrant visas issued to Nigerians was reduced to single-entry visas with a three-month duration.
The pre-action notice was signed by Emmanuel Okpara, Esq., Litigation and Compliance Director, and Mus’ab Awwal Mu’az, Esq., secretary of the Association’s Steering Committee.
The dispute stemmed from a consent judgment delivered on November 3, 2025, by Justice J.K. Omotosho of the Federal High Court, Abuja, in Suit No: FHC/ABJ/CC/355/2025 between Meta Platforms, Inc. and the NDPC.
Following investigations conducted under the Nigeria Data Protection Act (NDPA), 2023, the NDPC had issued a Final Order against Meta Platforms, Inc., finding “widespread violations of the data protection and privacy rights of approximately 61 million Nigerians,” and imposing a remedial fine of USD 32,800,000.
The pre-action notice was signed by Emmanuel Okpara, Esq., Litigation and Compliance Director, and Mus’ab Awwal Mu’az, Esq., Secretary of the Association’s Steering Committee.
The dispute stemmed from a consent judgment delivered on November 3, 2025, by Justice J.K. Omotosho of the Federal High Court, Abuja, in Suit No: FHC/ABJ/CC/355/2025 between Meta Platforms, Inc. and the NDPC.
Following investigations conducted under the Nigeria Data Protection Act (NDPA), 2023, the NDPC had issued a Final Order against Meta Platforms, Inc., finding “widespread violations of the data protection and privacy rights of approximately 61 million Nigerians,” and imposing a remedial fine of USD 32,800,000.
The NDPC investigation stemmed from a petition filed at the commission on August 14, 2023, against Meta Platforms Inc. by the convener of Personal Data Protection Awareness Initiative, Ozoemena Nwogbo, regarding violation of the Nigeria Data Protection Act.
After its investigation, NDPC found Meta Platforms Inc. wanting and, on February 18, 2025, issued nine Final Orders against Meta Platforms Inc.
NDPC’s Order
The NDPC’s order nine reads, “Meta shall pay the naira equivalent of 32,800,000 USD (Thirty-two million, eight-hundred thousand United States Dollars) as a remedial fee. The naira equivalent shall be at the rate determined by the Central Bank of Nigeria.
“The details of the account for payment of the remedial fee are as follows: Account Name: Nigeria Data Protection Commission Fund Account. Account Number: 0020331265048 (300131267). Use RTGS for payment.”
The NDPC added, “Note that Meta has a right to seek a judicial review of this decision. The Commission will closely monitor Meta’s remediation process and its impact on data subjects for upwards of six months.”
However, the Final Order was subsequently set aside through Terms of Settlement, which were adopted by the court as a consent judgment on November 3, 2025, following a suit marked FHC/ABJ/CS/355/2025, filed by Meta Platforms Inc. against the NDPC.
Part of the Terms of Settlement entered between NDPC and Meta Platforms Inc. reads, “The applicant (Meta Platforms Inc.) and the respondent (NDPC) have come to a mutual settlement agreement that resolves the dispute underlying the applicant’s originating Summons.
“Pursuant to this agreement: (I) the applicant has agreed to provide specific remedial consideration to the respondent in support of protecting the rights of data subjects in Nigeria; and (II) the respondent has inter alia agreed to set aside and waive any rights to enforce or take steps to enforce the Final Orders against the applicant.”
The settlement terms specifically read, “In the light of the foregoing: The applicant wholly and completely terminates, abandons, withdraws, and discontinues the Originating Summons as well as any and all claims against the respondent connected to or arising from the matters or the subject matter thereof, except as the parties have otherwise agreed.
“The respondent: (I) sets aside the Final Orders against Meta; and (II) save and except as the parties have otherwise agreed, fully and firmly releases and discharges Meta from any and all claims, demands, actions, causes of action, contracts, obligations, suits, debts, costs, liabilities, which the respondent ever had, may now have, or May hereafter claim to have against Meta in respect of the matters.”
Association Alleges Illegality In Settlement
But the Data Privacy Lawyers Association contended that the consent judgment was entered into unlawfully, arguing that it was done without lawful statutory authority, in violation of the Nigeria Data Protection Act, 2023, and in derogation of the constitutional right to privacy guaranteed under Section 37 of the Constitution of the Federal Republic of Nigeria, 1999 (as amended).
The Association further said the action was taken “to the grave prejudice of millions of affected Nigerians and the public interest, as well as the Federal Government of Nigeria.”
In the notice, the Association warned that unless the issues raised are urgently addressed within the statutory notice period, it would approach the Federal High Court to seek multiple reliefs.
These include an order setting aside, vacating, and nullifying the consent judgment on grounds of fraud, collusion, material non-disclosure, lack of statutory authority, and violation of the NDPA, 2023.
It is also seeking a declaration that the consent judgment is “null, void, unconstitutional, and of no legal effect,” as well as a declaration that the NDPC lacks statutory authority to waive, compro
Other reliefs sought include an order restoring and reviving the Final Order against Meta Platforms, including the $32.8 million fine, and an order restraining any further reliance on or enforcement of the consent judgment.
The Association also asked the court for other orders the Court may deem fit in the interest of justice, public accountability, and the protection of constitutional rights.
In the interest of transparency and accountability, the Association urged the NDPC to provide a written explanation of the legal basis for entering into the Terms of Settlement, clarify the statutory authority relied upon to waive the remedial fine and set aside the Final Order, and take steps to remedy the issues raised.
The letter, the Association said, constitutes the requisite pre-action notice under applicable law.
It warned that unless the concerns are satisfactorily addressed within 30 days of receipt of the notice, it will proceed to institute legal proceedings without further recourse.
mise, or extinguish liabilities, sanctions, or remedial fines arising from established violations of the Act.
Nigeria’s Internet Usage Hits 1.24m Terabytes – NCC
World Bank Reveals Obstacles to Growth of Mobile Money Accounts in Sub-Saharan Africa
NCC Ranked Among Top 3 MDAs for Best Website Performance in 2025
FIRS Declares NIN, CAC Numbers as Tax IDs from 2026
Woherem Proposes Pragmatic Roadmap to End Terrorism and Banditry in Nigeria
Nigeria Records Highest Weekly Cyberattacks in Africa — Report
Cyber Tsunami Hits Nigeria as Breaches Surge 1,047%, esentry Q3 Report Reveals
Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers
GenAI Adoption Among African workers Outpace Global Peers
Jumia’s Data Shows Nigerians Turning to Digital Retail to Navigate Inflation Pressures
E-Financial3 days agoFIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
E-Financial3 days agoAfDB Group Mobilises Global Private Capital to Close Africa’s Financing Gap
Telecom3 days agoOyedele Dismisses Claims Bank Accounts Without TIN Will Be Frozen
E-Financial3 days agoFidelity Bank Bolsters Ikoyi Fire Station with Hoses, Pumps for Safer Communities
General News2 days agoWoherem Proposes Pragmatic Roadmap to End Terrorism and Banditry in Nigeria
Telecom3 days agoAmazon Blocks 1,800 North Koreans From Job Applications
News2 days agoFIRS Declares NIN, CAC Numbers as Tax IDs from 2026
General News3 days agoREDAN Seals Landmark MoU, Validates Sytemap’s Real Estate Infrastructure