E-Business
The Evolving Threat Landscape: Top Cybercrime Trends Organisations Should Take Note of in 2023

By Emmanuel Asika
The cyber threat landscape continued to evolve last year, with malevolent players joining forces more than ever before, exchanging access to networks and systems, sharing malware and sharpening their attack methods.

Such heightened collaboration, coupled with the low cost of malware – three-quarters of malware kits cost less than ₦7,000 – are further triggering cybercrime to be more accessible.
The implication being that more devices and end-users will be vulnerable to being under attack in 2023, and as cyber criminals intensify attempts to access enterprises – these systems, PCs and printers will be at the forefront.
These challenges, for cyber-security experts, will be intensified by the growing economic slump and uncertainties. As cybersecurity spending is set to increase by 13.2% in 2023, cost projections will be under critical observation, with emphasis on the most important cybersecurity demands.
With tough impending decisions, below are four cybersecurity trends that institutions must plan for in 2023:
- Increasing costs can prompt an inflow of cyber hustlers and money mules, powering the cybercrime economy and leaving users at risk
The increase in the cybercrime gig economy, with its swing to platform-based business models, has made cybercrime simpler, affordable, and more dynamic.
Cybercrime devices and mentoring services are readily available at low costs, luring cyber hustlers – adherents with little technical skill – to access needed information to make gains.
With an impending global downturn, easy access to cybercrime tools and skills could enhance the number of scam SMS messages and emails filling our inboxes.
Lured by the potential of quick money, there is a likelihood of seeing more recruits into money-muling schemes, unintentionally encouraging the cybercrime ecosystem as enablers of fraudulent transactions, money laundering, and perhaps ransoms payments.
The interrelated nature of the cybercrime gig economy means that threat actors can easily make money from email compromise attacks.
If they find a victim and succeed by compromising an enterprise device, they can market that access to bigger ransomware gangs. This gives structured groups of hackers more reach, hence feeding into the cybercrime ecosystem.
With increasing attacks against users, embedding security in all devices from the hardware will be significant to prevent, detect and recover from attacks.
Adopting a robust security culture is key for building resilience, however, only when combined with technology that decreases an organization’s attack interface. A whole group of threats can be eradicated without relying on detection by isolating risky activities like malicious emails.
Threat containment technologies in this case ensure that if a user opens a malicious link or attachment, the malware can’t infect any data. With this model, businesses reduce the propensity of malicious attacks and protect employee interests without compromising their workflows.
- Notorious hackers will invest in more attacks below the operating system.
Until recently, firmware attacks were only used by sophisticated threat groups and countries.
However, just last year, early signs revealed an increased interest and development of attacks below the operating system – from tools to hack BIOS passwords, to rootkits and trojans targeting device’s firmware. Today, we now see firmware rootkits advertised relatively cheaply on cybercrime marketplaces.
As one would expect, sophisticated threat actors are always looking to stay one step ahead in terms of their attack capabilities. Unfortunately, firmware security is frequently disregarded by organizations, giving room for adversaries to attack and exploit.
Access to the firmware level allows attackers to gain persistent control and hide below the operating system, making them very hard to detect – let alone remove and remediate.
As such, organizations and individuals must ensure they understand industry best practices and standards for device hardware and firmware security.
Additionally, organizations must further endeavour to understand and evaluate the latest technology readily available to protect, detect and recover from firmware attacks.
- Remote access equipment will be on the forefront for attacks
Session hijacking is anticipated. The year will witness a growth in popularity – where an attacker hijacks a remote access session to obtain an organisation’s sensitive data and systems.
The user is characteristically unsuspecting that anything malicious has happened and takes milliseconds to inject key sequences and issue commands that generate an alternative gateway for persistent access.
It works even if Privileged Access Management (PAM) systems employ Multi-Factor Authentication (MFA), such as smart cards.
When a malicious attack links to Operational Technology (OT) and Industrial Control Systems (ICS) running factories and industrial plants, there could also be a noticeable impact on operational readiness and safety – possibly cutting off access to energy or communication for entire areas.
The only way of preventing these kinds of attacks is breaking the attack chain and strong isolation technology, either through using a physically separate system, like a Privileged Access Workstation (PAW), or virtual separation, via hypervisor-based approaches.
- Neglect print security at your risk in 2023
Presently, print security is endangered by the constant tendency to be a neglected factor of the total cybersecurity environment and with more printers connected to corporate networks due to hybrid working, the risks keep increasing. Institutions need to structure security policies and processes for monitoring and protecting print gadgets from attacks, at home and in the workplace.
The challenge is the risk telemetry coming from end points, including printers, is growing by the day. Consequently, we will see institutions concentrate investments on solutions and services delivery that provide functional intelligence rather than merely delivering more security data.
Tackling increasing threats
This year, organisations must be intentional with their security approaches. Often, security glitches start at the endpoint, hence, by embedding protection in these devices, businesses can lessen the burden on their security unit.
Regardless of the threats institutions face in 2023, it is apparent that the tactics we deploy to protect devices and data has to change.
The key consideration here is strategic resource allocation, and the security teams need to recognise the specific areas of the business that are most susceptible to threats, and that would be most impacted in the event of a breach.
It is also vital to have a layered approach to security which will allow institutions to execute isolation, gain actionable intelligence, isolation and more, whilst helping to lessen their attack surface and maintain safety of key data.
Emmanuel Asika is Country Head for Nigeria, at HP
E-Business
Elon Musk Seeks $134Bn from OpenAI, Microsoft for ‘Wrongful Gains’

Elon Musk, billionaire Tesla owner, has asked a United States (US) federal court to award him up to $134 billion in damages from OpenAI and Microsoft, stating that the companies earned “wrongful gains” from his early support of the artificial intelligence startup.

Elon Musk,
This is according to a court filing, reported by Reuters.
In filings ahead of a trial expected to start in April in Oakland, California, Musk stated that OpenAI benefited between $65.5 billion and $109.4 billion from his contributions when he helped co-found the organisation in 2015, and Microsoft gained between $13.3 billion and $25.1 billion through its involvement.
He has asked a United States (US) federal court to award him up to $134 billion in damages from OpenAI and Microsoft, stating that the companies earned “wrongful gains” from his early support of the artificial intelligence startup.
This is according to a court filing, reported by Reuters.
In filings ahead of a trial expected to start in April in Oakland, California, Musk stated that OpenAI benefited between $65.5 billion and $109.4 billion from his contributions when he helped co-found the organisation in 2015, and Microsoft gained between $13.3 billion and $25.1 billion through its involvement.
Musk’s legal team argues that his early financial and strategic contributions, including approximately $38 million in seed funding, the recruitment of key personnel, and assistance in connecting founders with contacts, laid the foundation for the later success of OpenAI and Microsoft’s commercial AI efforts.
“Without Elon Musk, there’d be no OpenAI. He provided the bulk of the seed funding, lent his reputation, and taught them all he knew about scaling a business. A pre-eminent expert quantified the value of that,” Musk’s lead trial lawyer Steven Molo told Reuters.
“Just as an early investor in a startup company may realise gains many orders of magnitude greater than the investor’s initial investment, the wrongful gains that OpenAI and Microsoft have earned—and which Mr Musk is now entitled to disgorge—are much larger than Mr Musk’s initial contributions,” the filing said.
Musk, who left OpenAI’s board in 2018 and now leads AI company xAI, alleges that OpenAI violated its founding non-profit mission when it restructured to include a for-profit arm tied to Microsoft’s investment and commercial strategy.
Meanwhile, OpenAI has labelled the lawsuit “baseless” and part of a “harassment campaign” by Musk, and Microsoft’s legal team has said there is no evidence the company “aided and abetted” OpenAI in any wrongdoing.
Both companies have asked the judge to limit what Musk’s expert witness may present at trial, arguing that the damages calculations are unreliable and could mislead a jury.
According to Reuters, Musk’s filing says he may pursue punitive damages and other penalties, including a possible injunction, if the jury finds the companies liable, though it did not specify what form any injunction would take.
E-Business
Nigeria Targeted with 4,622 Cyber-attacks Per Week in December 2025

In December 2025, organisations globally faced sustained cyber pressure, as the average number of cyber-attacks per organisation per week reached 2 027, a 1% increase from the previous month and a 9% increase from December 2024.

This is according to December 2025 Global Cyber Attack Statistics by Check Point Research, the threat intelligence arm of Check Point Software Technologies.
According to the statistics, Latin America was the hardest hit, with companies experiencing an average of 3 065 cyber-attacks per week, a 26% year-over-year increase.
In contrast, Africa saw a decline in attacks, with Nigeria (4 622 attacks per week) and Angola (4 002 attacks per week) being the most targeted countries on the continent.
The report’s findings highlight the evolving cyber threat landscape, with ransomware and GenAI-driven data risks posing significant challenges to companies worldwide.
Ransomware attacks jumped 60% year over year, with 945 publicly reported incidents in December. Qilin was the most active ransomware operator, responsible for 18% of publicly disclosed attacks.
“Ransomware continues to scale through industrialised operations, while unmanaged GenAI usage is creating widespread data exposure at enterprise level,” said Omer Dembinsky, data research manager at Check Point Research.
The report noted the education sector was the most targeted industry globally, with 4 349 cyber attacks per week; followed by government (2 666 attacks per week); and associations and non-profits (2 509 attacks per week).
The widespread adoption of GenAI tools has introduced new cyber security risks, with one in 27 GenAI prompts posing a high risk of sensitive data leakage.
Experts warn that companies must prioritise prevention-first security, real-time AI threat intelligence and strong governance over AI tools to mitigate these risks.
Hendrik de Bruin, head of security consulting at Check Point Software, added: “Strengthening ransomware resilience, deploying AI-powered prevention and enforcing clear GenAI governance will be critical to reducing cyber risk in the year ahead.”
E-Business
Half of Global Companies Build SOCs to Enhance Cybersecurity, with a Focus on Human Expertise

Among the primary reasons for establishing a Security Operations Center (SOC) are strengthening cybersecurity posture, enabling faster detection and response and gaining a competitive edge.

Interestingly, despite the increasing demand for automated cybersecurity solutions, businesses rely on skilled security professionals to make key decisions, as human expertise remains essential for effective security management.
A Security Operations Center (SOC) is a dedicated organisational unit responsible for continuous monitoring and safeguarding of a company’s IT infrastructure. Its core mission is to proactively detect, analyse and respond to cybersecurity threats.
To identify the main drivers, strategic priorities, and potential challenges in SOC planning and implementation, Kaspersky has conducted a comprehensive global study involving senior IT security specialists, managers and directors from companies with 500 or more employees.
All participants operate without a SOC but have plans to establish one in the near future. The study spans 16 countries across APAC, META, LATAM, Europe, and Russia, providing valuable insights into the emerging trends and best practices in SOC development worldwide.
The findings of the research reveal that 50% of companies intend to establish SOCs to strengthen their cybersecurity posture, and 45% are motivated by the need to address increasingly sophisticated and dangerous threats.
Other drivers include budget optimisation, the necessity for faster detection and response, and the expansion of software, endpoints and user devices – factors that demand more comprehensive and layered security measures.
These are cited by 41% of organisations. Additionally, 40% seek better protection of confidential information, 39% aim to meet regulatory requirements and one-third (33%) expect SOC capabilities to provide a competitive edge. Larger enterprises tend to cite each of these reasons more often, reflecting the broader operational and regulatory pressures they experience.
Continuous monitoring becomes the leading SOC requirement
Among the key functions organisations plan to delegate, 24/7 security monitoring leads at 54%. This around-the-clock vigilance enables early detection of anomalies, prevents escalation and sustains cyber resilience in real-time. This demand highlights a strategic requirement for proactive risk management, as organisations aim to defend against persistent threats that can strike at any moment.
Companies intending to fully outsource SOC operations show a stronger interest in applying “lessons learned” methodologies, whereas those developing internal SOCs focus more on access management to maintain tighter control.
Human expertise drives SOC technology choices
While SOCs use advanced technology, the choices made by organisations show that human analysts are very important. Among the solutions that organisations plan to include in SOC are – Threat Intelligence Platforms (48%), Endpoint Detection and Response (42%) and Security Information and Event Management systems (40%) – sophisticated solutions that automate data collection and reduce operational load, however, they depend heavily on skilled security professionals who provide critical context, interpret complex findings and make final decisions when guiding appropriate responses.
Other solutions chosen include Extended Detection and Response (38%), Network Detection and Response (37%) and Managed Detection and Response (33%). Large enterprises tend to adopt more technologies (5.5 per SOC on average), while smaller ones integrate fewer (3.8).
“To successfully build a SOC, companies must prioritise not only the right mix of technology but also the careful planning of processes, clear goal-setting and effective resource distribution.
“Well-defined workflows and continuous improvement are essential to ensure that human analysts can focus on critical tasks, making the SOC a proactive and adaptable component of their cybersecurity strategy,” comments Roman Nazarov, Head of SOC Consulting at Kaspersky.
E-Financial1 day agoHere Are Nigerian Banks That Have Secured Their Licences
E-Financial1 day agoZenith Bank Top Nigerian Bank Pick Ahead of GTCO, AccessCorp
Telecom1 day agoMTN CEO Toriola Hails Nigeria’s Telecom Transformation at MIPAD
News1 day agoICPC Charges Ozekhome with Forgery, Corruption Over London Property
E-Financial1 day agoNigeria Processed $92.1Bn Crypto Transactions in 12 Months — PwC
Telecom1 day agoLebara Launches Agent Registration Portal
E-Financial1 day agoHow Crypto Criminals Stole $700m from People – often Using Age-Old Tricks
E-Business1 day agoElon Musk Seeks $134Bn from OpenAI, Microsoft for ‘Wrongful Gains’


















