E-Business
Kaspersky Warns of Top IT Security Threats in Africa
Despite research showing an overall decrease in certain malware families and types in sub-Saharan Africa (SSA) in H1 2020 (36% decrease in South Africa, 26% decrease in Kenya and a 2.7% decrease in Nigeria), Kaspersky stresses that the human cyber threat remains rife, where Africa is not immune to the evolving techniques of Advanced Persistent Threats (APTs), as well as the possibilities of being a future target of hacking-for-hire threat actor groups.
Kaspersky research has found that globally, APT groups are evolving their techniques and are upgrading their toolset to continue stealing sensitive information.
Furthermore, Kaspersky has seen a rise of hackers-for-hire or cyber mercenaries during the first two quarters of 2020. In fact, three cyber mercenary groups have been exposed across the world this year alone.
As this activity has taken place outside of Africa, Kaspersky suspect that these types of actors may have been somewhat forgotten and do not necessarily form part of cyber defence strategies.
However, the region may become a focus of these groups in the coming months and thus, businesses and entities need to have an understanding of these emerging threats, along with the threat of APTs, to be prepared and take proactive steps towards effective cybersecurity.
Hackers-for-hire or cyber mercenaries do not necessarily have monetary motivations like traditional cybercrime. Instead, they steal private data to monetise it in a different way – usually for the purpose of providing advice or insights, based on the data, to share value of a competitive advantage.
For example, a bank might get targeted and have its data analysed to gain an understanding of its market exposure, clients, and back-end systems. A competitor can use that to gain significant benefit. The reality is that in this evolving cyberthreat landscape, no company or government institution can consider themselves safe.
In South Africa, Kenya and Nigeria, APT groups are exploiting the current uncertainty around COVID-19 to steal sensitive information. More sophisticated techniques have emerged that delivers malware in non-conventional ways.
While overall malware attacks in South Africa, Kenya and Nigeria decreased during the first two quarters of 2020, certain malware types, such as the STOP ransomware, are proving increasingly popular for certain cybercriminals.
The same applies to financial malware in South Africa and Nigeria as examples. So, even though it decreased in these countries, certain financial malware types are gaining in popularity thanks to their unique techniques which these groups are exploiting to monetise data. This emphasises that attacks are becoming more targeted and at specific companies, in specific regions and for specific purposes.
The top industries under attack in Sub-Saharan Africa in H1 2020 include government, education, healthcare, and military. While government and military present compelling – and obvious – targets, education and healthcare are often used as pivot points to gain access to other institutions. Sometimes, an entity is a victim while other times it is the target.
The top three threat actors in these regions in this regard are TransparentTribe, Oilrig, and MuddyWater.
Says Maher Yamout, Senior Security Research, Global Research & Analysis Team at Kaspersky; “The remainder of the year will likely see APT groups and hacking-for-hire threat actors increase in prominence across the globe.
Africa will continue to see more sophisticated APTs emerge and we also suspect that the hacking-for-hire actor type could target companies in Africa in the future. We also anticipate that cybercriminals will increase targeted ransomware deployment using different ways.
These can range from trojanised cracked software to exploitation across the supply chain of the targeted industry. Data breaches will certainly become more commonplace especially as people will continue to work remotely for the foreseeable future while exposing their systems to the Internet without adequate protection.”
While prevention is ideal, detection is a must. Realistically, no organisation or government department can prevent everything. But if there is an understanding of the technology environment and having the ability to detect any deviation from the baseline, decision-makers will go to great strides in mitigating the risk of compromise and by understanding the threat dynamics, organisations can better protect themselves from evolving cyberattacks.
The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.
The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.
When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.
At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.
“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.
Galaxy Backbone (GBB) aligns with and celebrates the successful announcement by the Office of the Head of the Civil Service of the Federation on the achievement of a Paperless Civil Service, a significant milestone in Nigeria’s public sector reform and digital transformation agenda.
The milestone was formally highlighted at a press briefing led by the Head of the Civil Service of the Federation, Mrs. Didi Esther Walson-Jack, who commended Galaxy Backbone for its sustained support and contribution throughout the implementation of the programme.
GBB has played a critical role in enabling this transition by providing secure, scalable, and shared digital infrastructure that supports the digitisation of government processes across Ministries, Departments and Agencies (MDAs). Through the 1Government Cloud, MDAs have been empowered to migrate from paper-based workflows to digital platforms, improving efficiency, collaboration, data security, and service delivery across the Federal Civil Service.
In addition, GovMail, GBB’s secure government email platform, has strengthened official communication, enhanced records management, and reinforced cybersecurity standards—key pillars in sustaining a paperless operating environment.
Galaxy Backbone acknowledges the collective efforts of the Office of the Head of the Civil Service of the Federation, Permanent Secretaries, Directors of ICT, consultants, partners, and dedicated public servants whose commitment and collaboration ensured the smooth delivery of this initiative.
The Managing Director/Chief Executive Officer of Galaxy Backbone, Prof. Ibrahim Adeyanju, was represented at the press briefing by Akintayo Bamisaye, Acting Group Head, Research, Digital Innovation and Skills Department (RDIS).
GBB describes the achievement as a strong close to 2025 and reaffirms its commitment to supporting the Federal Government in building a modern, efficient, and digitally enabled public service.
At the close of 2025, Temidayo Ojo, the CEO of Jumia Nigeria, reflected on a year-end shopping season that points to the growing maturity of the country’s e-commerce market. “Black Friday is no longer a single, short-lived spike in activity,” he said.
“It has become a familiar, anticipated moment in the retail calendar, where consumers shop deliberately and with confidence.”
Preliminary KPIs for the two months ended November 30, 2025, show strong year-on-year growth in both orders and Gross Merchandise Value (GMV), with GMV growth outpacing order growth. This indicates that customers are placing fuller, more considered baskets rather than shopping in fragmented transactions. Nigeria ranked among Jumia Group’s better-performing markets, with engagement remaining steady throughout the Black Friday period rather than spiking briefly and tapering off.
A key factor behind this performance is the growing familiarity of consumers with online shopping. Customers are increasingly leveraging platform features such as saved carts, brand stores, and price comparison tools to plan purchases in advance. This trend suggests that digital commerce is becoming embedded in everyday habits rather than being viewed as a one-off event.
Ojo also highlighted the role of Jumia’s JForce network in connecting digital commerce to local communities. “Our agents are critical to ensuring that customers across Nigeria, including secondary cities and smaller communities, have access to variety, consistent pricing, and reliable delivery,” he said. “During peak periods like Black Friday, JForce agents can respond faster, serve more customers efficiently, and build stronger local relationships. This isn’t just a distribution channel—it’s a pathway to sustainable income and inclusion.”
Reflecting on the overall performance, the CEO concluded: “What we’re seeing this year-end is steady engagement across categories, stronger consumer confidence, and partners like our JForce agents benefiting from increased activity.
“It confirms that Nigeria’s e-commerce ecosystem is maturing, growing in a more structured and resilient way. As the December Holiday Sale continues, we expect these patterns of familiarity, trust, and participation to sustain momentum and drive both commerce and community impact across the country.”
NAHCO Signs New Ground Handling Deals
Firm Identifies Global Scam Activity Linked to the Release of Avatar 3
Showmax Unlocks Easier Payments for Nigerian Subscribers via Baxi
Mandatory Biometric Verification for Starlink Users in Nigeria Begins
Ecobank Offsets Repayment of $300m Eurobond Notes
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
FIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
PalmPay Launches N400 Million World Travel Carnival, Rewarding Users with Free Global Trips
Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers
News1 day agoCourt Sends Faleti, Ex-Lagos Director to Jail for Stealing ₦48.9m from Access Bank
E-Financial1 day agoRemita Powers over ₦100 Trillion in Payments as Nigeria’s Digital Economy Expands
News2 days ago974 Nigerians Face Imminent Deportation from Canada Amid Enforcement Surge
General News2 days agoHouse of Reps Releases Certified Copies of Tax Reform Acts amid Gazette Discrepancy Claims
E-Financial1 day agoWhy 2026 Must Be the Year Nigeria’s Economy Works for All
E-Financial1 day agoFlutterwave Acquires Nigeria’s Mono in $25m-$40m All-Stock Deal
E-Financial1 day ago2026: SEC to Review Rules to Incentivise SME Listings
General News1 day agoNigeria Targets Satellite-to-Mobile Services in Draft Spectrum Roadmap