Connect with us

E-Business

Africa Remains Most Targeted by Cybercrime in 2023

Published

on

Kindly share this post

As organisations continue to become more digitised, throughout 2023 Africa remains one of the world regions most targeted by cybercrime. At a recent press conference in Johannesburg, Kaspersky shared some insights and statistics related to the regional threat landscape in the third quarter of 2023 and made forecasts on how the situation is going to develop in 2024.

Web threats

Web threats are Internet-based threats that expose people and computer systems to harm online. There was a 24% increase in the number of corporate users affected by web threats from Q2 to Q3 2023 in South Africa. However, comparing Q3 2022 to Q3 2023, there was an 8% decline in the number of corporate users affected by web threats.

Phishing

Phishing is a type of Internet fraud that seeks to acquire a user’s credentials by deception. It includes theft of passwords, credit card numbers, bank account details and other confidential information. In South Africa, phishing attacks detected for corporate users in Q3 2023 surged by 134% compared to Q2 2023 and by 16% compared to Q3 2022.

Attacks on Industrial Control Systems

Africa is among the regions with the highest number of detected attacks on industrial control systems (ICS computers).

ICS computers are used in energy and mining sectors, automotive manufacturing, building automation infrastructures and other spheres to perform a range of operational technology functions – from the workstations of engineers and operators to supervisory control and data acquisition servers.

In the third quarter of 2023, according to Kaspersky ICS CERT, attacks were detected on 32% of ICS computers in Africa. In South Africa, attacks were detected on 22% of machines. Globally, malicious objects were detected on 25% of ICS machines. All these attacks were blocked by Kaspersky solutions.

Attacks on the Internet of Things

The number of attacks on Internet of Things (IoT) devices has been increasing exponentially over the last years globally. This is related both to the activity of criminal actors and to the increasing number of IoT devices that are in use by individual users, businesses, and production facilities.

IoT devices include not only wearables and smart home appliances, but also smart city systems, self-driving cars, automated retail checkouts, and other smart devices for home and business use.

These devices can collect and transfer data over a wireless network without human input. Cybercriminals use networks of infected smart devices to conduct DDoS attacks or as a proxy for other types of malicious actions.

In Q3 2023, South Africa accounts for 28% of attacks on IoT devices that were detected by Kaspersky in the African region. Kenya accounts for 12% of attacks on IoT devices, and Nigeria – for 6%.

“In forecasting the development of the cyberthreat landscape for 2024, we anticipate a dynamic evolution of cyberthreats marked by an upsurge in state-sponsored cyber-attacks, and ‘hacktivism’ will become one of the norms of cyber-warfare,” comments David Emm, Principal Cybersecurity Researcher at Kaspersky.

“The prevalence of accessible generative AI is set to fuel an expansion of spear-phishing tactics, while the creative exploitation of vulnerabilities in mobile and IoT devices will be on the rise.

“Businesses today should be proactive and counter these cyberthreats with advanced technologies such as threat feeds, security information and event management systems, endpoint detection and response solutions, and tools with digital forensics and incident response features.”


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Presidential Tax Reforms Committee Moves to Boost BPO Business in Nigeria

Published

on

Kindly share this post

Worried by the dwindling fortune of Business Process Outsourcing (BPO) business in the country, Presidential Fiscal Policy and Tax Reforms Committee has identified the impediments to its growth and moves to remove them to ensure that the country takes a pride place in the sector.

Taiwo Oyedele, chairman of the committee, said at a workshop for journalist in Lagos on Thursday that his committee identified tax structure in the country which hinders international organizations from hiring Nigerians living in the country to work for them.

“Our existing tax structure demands that any company outside of Nigeria that hires Nigerians living in the country to work remotely will be expected to pay tax on the company’s income as well as on the income of the Nigerian working for the company.

“This tax structure has pushed overseas companies away from Nigeria to countries such as India and Philippines that their BPO sector have grown exponentially. With the removal of tax on the company’s income, we have created a level playing ground for BPO business to flourish in the country,” he said.

It would be recalled that Kashifu Inuwa Abdullahi, director general, the National Information Technology Development Agency (NITDA) had put the worth of Business Process Outsourcing (BPO) ecosystem in the country at $285.8Million.

According to Inuwa, “today, Nigeria Outsourcing sector worth $285.8M employing 16,540 Nigerians mostly living in Nigeria and working for companies outside Nigeria.

“We started in 2020 with a strategy and engaged with the Business Process Outsourcing (BPO) to develop the strategy and some of them started operations in the mid of 2020 and we want to expand this because we believe the sector will create more jobs than any other sector in Nigeria”.

Oyedele, added that his committee has proposed a single digit number of 8 taxes to be collected by all the tiers of governments in the country.

“One of the critical challenges facing the tax system in Nigeria is the shockingly high level of non-compliance as a result of low tax morale. Tax Morale is the willingness to comply with taxes and the belief that tax evasion is wrong,” he noted.

He said the principle behind these is to do away with nuisance taxes with very low revenue yield, high cost of collection and ultimate burden on the poor and small businesses.

“Focus on high revenue yielding taxes, that are broad-based and relatively ease to collect. Merge taxes and levies that are imposed on the same or substantially similar tax base. Institutionalize the tax harmonization reform to ensure sustainability,” he stated.

According to him, “the outcomes expected include; Eliminate informal & implicit taxes, harmonise tax administration, rationalize tax incentives, leverage technology and big data, modernise customs administration, simplify compliance, optimise resources and government assets.

Budget better – Restructure the budget (classify items under infrastructure; human capital investment; personnel cost, headcount & productivity; administrative overheads; debt service & sinking funds), fully implemented zero based budgeting, and introduce long term appropriation.

Spend better – Tackle systemic corruption, prioritise spending on basic needs to address multidimensional poverty, restrict borrowing to productive spending and self-financing projects, leverage PPP and equity financing for viable projects, enhance public procurement effectiveness.

Manage better – Leverage technology for revenue, debt, and expenditure management. Adhere to fiscal rules and benchmark with strict penalties for violations. Establish a national fiscal risk framework and processes to prevent, detect, and correct financial infractions.

Report better – Harmonise and standardise reporting, provide transparent and timely information, enhance audit & internal control, administer consequences.

The eight proposed taxes are; Income Tax; Value Added Tax; Property tax; Customs duties; Excise tax; Stamp duties; Special levy and Harmonised levy.


Kindly share this post
Continue Reading

E-Business

NDPC Investigates 40 Financial Sector Operators over Data Breach

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has said it is investigating 40 banks, insurance companies, stock brokers and other operators in the financial sector over customers’ data breach.

NDPC Investigates 40 Financial Sector Operators over Data Breach

Dr Vincent Olatunji, national commissioner and CEO, who disclosed this at a breakfast meeting with Data Protection Compliance Organisations (DPCOs) in Lagos, said the commission would sanction the erring financial sector operators if found guilty.

Conquering the clouds on a journey to Ta Xua with the team – Road Trip Vietnam Team – Nếm TV

Nigeria Data Protection Regulation (NDPR) mandates FG to collect 2% of annual turnover of any organisation guilty of data breach.

“We have beamed our search light on 40 players in the financial sector. We have written to them to explain why they have not been complying with data regulations and we may sanction them if they ‘re found guilty”, Dr Olatunji said.

The NDPC boss said the erring companies had been given 21 days to answer why they should not be sanctioned.

He also disclosed that licences of some inactive DPCOs would be revoked by year end while some new ones would be licensed.

He disclosed that there are over 500,000 data processors organisations in Nigeria, adding that all of them would be monitored on how they handle data of Nigerians.

While warning companies and government agencies collecting data of Nigerians in their course of operations against mishandling those data, he also assured Nigerians of adequate data protection.

He said though the commission was not afraid of lawsuits, it would not in any way trample on the rights of any organisation.

 

 


Kindly share this post
Continue Reading

E-Business

Cybersecurity Skills Shortage Ranked as Biggest Risk to MSPs, Clients

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions that defeat cyberattacks, has released its inaugural “MSP Perspectives 2024” survey report, which found that the biggest day-to-day challenge facing Managed Service Providers (MSP) is keeping up with the latest cybersecurity solutions/technologies, cited by 39% of the MSPs surveyed.

 

Alongside this, MSPs indicated that hiring new cybersecurity analysts to keep up with customer growth and keep pace with the latest cyberthreats were also top challenges.

The survey also reveals that MSPs perceive the shortage of in-house cybersecurity skills to be the single biggest cybersecurity risk to both their own business and their clients’ organizations.

MSPs also perceive stolen access data and credentials and unpatched vulnerabilities to be amongst the biggest security risks to their customers.

The latest State of Ransomware 2024 report found that nearly a third (29%) of ransomware attacks started with compromised credentials, showing the prevalence of this entry vector.

“The speed of innovation across the cybersecurity battleground means it’s harder than ever for MSPs to keep up with threats and the cyber controls designed to stop them.

“When you couple this with a global skills shortage, which has made it infinitely more difficult for many MSPs to attract and retain cybersecurity analyst resources, its unsurprising that MSPs feel unable to keep pace with the changing threat landscape,” said Scott Barlow vice president of MSP at Sophos.

“This is all compounded by the need for 24×7 coverage as indicated in our 2023 Active Adversary report for Tech Leaders, which finds that 91% of ransomware attacks now happen out of business hours.”

In response to this complex threat landscape, there is growing demand for managed detection and response (MDR) services to provide always-on coverage. Currently 81% of MSPs offer an MDR service, and almost all (97%) MSPs that do not currently offer MDR plan to add it to their portfolio in the coming years.

Reflecting the shortage of in-house cybersecurity skills, 66% of MSPs use a third-party vendor to deliver the MDR service and a further 15% deliver jointly through their own SOC and a third-party vendor.

Topping the list of essential capabilities in a third-party MDR provider is the ability to provide a 24/7 incident response service.

MSPs are also streamlining their cybersecurity partnerships, working with a small number of vendors.

The study revealed that over half (53%) of MSPs work with just one or two cybersecurity vendors, rising to 83% that use between one and five.

Reflecting the effort and overhead of running multiple platforms, MSPs estimate that they could cut their day-to-day management time by 48% if they could manage all their cybersecurity tools from a single platform.

Other interesting findings from the report include:

·       99% of MSPs report an increase in demand for cyber insurance-related support, with the most common requests including clients wanting to implement an MDR service to improve their insurability (47%) or to receive help completing their insurance application (45%).

·       MSPs want flexibility from their MDR provider, with 71% saying it is “essential or very important” that the vendor can use telemetry from their existing security tools for threat detection and response.

·       MSPs in the U.S. lead the way in MDR service provision with almost all (94%) already offering MDR, compared to 70% in Germany, 62% in the U.K., and 58% in Australia.

“While MSPs have a huge job to do in protecting their customers against fast moving adversaries, there’s tremendous opportunity to grow their business and profitability if they can find the right security set up.

“The data shows that MSPs are strengthening their proposition and reducing overheads by amalgamating the platforms they use and engaging with third-party MDR vendors to expand their service offerings.

“As they look to build their security offering of the future, they should prioritize vendors that can offer a complete portfolio of industry-best, fully managed security services and solutions,” continued Barlow.

Data for the MSP Perspectives 2024 report comes from a vendor-agnostic survey of 350 MSPs across the U.S. (200), U.K. (50), Germany (50) and Australia (50). The survey was commissioned by Sophos and conducted by research house Vanson Bourne in March 2024.

Read the MSP Perspectives 2024 report for global findings and data by sector on Sophos.com.


Kindly share this post
Continue Reading

Trending