E-Business
Africa: 2023 Cyberthreats Landscape, Next Year Predictions

By Yusuph Kileo
In recent years, of African countries are working hard to adopt 2030 African digital transformation agenda. Finance, education, agriculture, government, security, and manufacturing, are actively adopting digital technologies and transitioning their operations to online platforms.

As we advance in technology throughout the continent, nations need to remember, cybersecurity and personal data protection are fundamental principles in the implementation of the digital transformation project in order to minimise the challenges that come along with the technology.
The year 2023 was filled with countless cyberattacks across many countries — Some of these attacks targeted critical infrastructure, financial institutions, governments and other companies.
As African countries are now pushing for digital transformation and experiencing rapid economic development, cybersecurity remains a pressing concern for businesses across Africa.
Unfortunately, some of the African countries indicate inadequate security measures to fight off cybercrime, leaving them highly susceptible to cyberattacks — They have weak prevention mechanisms to combat cyber threats and poor intrusion detection systems, thereby placing sensitive transactions at significant risk.
There is an increase in the volume and sophistication of cyberattacks in financial institutions.
According to the 2023 Africa Financial Industry Barometer, 97% of surveyed leaders of financial institutions in Africa rank cybercrime and regulatory constraints on cybersecurity as the leading threat to the financial services industry alongside worsening economic conditions.
These massive cyberattacks in the region threatens the security of the growing economy and critical infrastructure.
MTN Nigeria, lost $53 million from its mobile money service which forces them to sue several banks in the Nigeria, financial institutions and e-citizen portal where halted by distributed denial of service attack in Kenya, South Africa there is an increase in backdoor and spyware attacks with an alarming 106,000 recorded attempts.
There are many similar cybersecurity incidents in other African countries and there is a need of urgent action to strengthen protection measures.
Failure to counter cyberthreats can have serious consequences for individuals, businesses and the socio-economic development of the continent.
Africa is not alone in this, In September alone other part of the world experience massive cyberattacks — To mention few notable cyberattacks; On September 6, the travel booking company Sabre experienced a serious ransomware attack where by 1.3 terabytes of data were stolen by Dunghill and just few days letter, on September 11th another ransomware attack on save the children lead to the loss of 6.8 terabyte of data and entertainment company MGM Resorts also suffered a cyberattack which was made public on X saying that the security incident severely impacted its business operations.
The following day on September 12, Hong Kong-based cryptocurrency exchange platform, CoinEx, saw the loss of US$70 million in cryptocurrency following a cyberattack launched against it.
In 2023, the most common cyberthreats in Africa includes Insider threats, Social Engineering, Software update supply chain attacks, Phishing attacks, Mobile malware, online shopping fraud, Ransomware, Man-in-the-middle (MitM) attack, Cryptojacking attacks, IoT botnet DDoS attacks and Malware attacks among others.
According to the year 2023 Positive technology report, the most targeted organizations with cyberattacks were those in the financial sector (18%), followed by telecommunications companies (13%), government agencies (12%), and organizations from the trade (12%) and industrial (10%) sectors.
The impact brought by these growing cyberattacks includes, Loss of customer/business, Loss of organisation critical data, Threat to organisation/National Security, Damage of goodwill and Reputation, Loss of Revenue — Economic Losses, Temporary or permanent closure, Lawsuits and arbitrations, Danger of terrorism, Time wastage and System down time — reduce productivity.
2024 cyberthreats prediction
Many report shows Africa being the most targeted region with cyberattacks, the year 2024 new techniques of cyberattacks will likely emerge, such as the increase in AI usage, hacktivism and targeting of smart home tech.
New botnets and rootkits will also likely appear, and hacker-for-hire services might increase, as will supply chain attacks, which might be provided as a service on cybercriminals’ underground forums.
According to Kaspersky, Advanced Persistent Threats (APT) is expected to expand surveillance efforts to include more smart home technology devices, such as smart home cameras and connected car systems.
This is particularly interesting for attackers because those devices are often uncontrolled, not updated or patched and subject to misconfigurations. This is also a concern because more people work from home nowadays, and their companies could be targeted via weak points in the home worker devices.
More hacktivism is expected affect many parts of Africa. Hacktivists will run Distributed Denial of Service attacks, increasingly use tools for Deepfakes and impersonation/disinformation. In addition, destructive and disruptive operations can be done. T
he use of wipers in several current political conflicts or the disruption of power in Ukraine are good examples of both types of operations.
Cybercriminals are also expected to develop new methods for automating cyberespionage. One method could be to automate the collection of information related to victims in every aspect of their online presence: social media, websites and more, as long as it relates to the victims’ identity.
State-sponsored cyberattack numbers also have the potential to surge, amid increasing geopolitical tensions. These attacks will likely threaten data theft or encryption, IT infrastructure destruction, long-term espionage, and cyber-sabotage.
The generative AI tools usage will increase, this will facilitate the mass production of spear phishing email content, which is often used as the initial vector of infection when targeting organizations. The messages written by the tools are more persuasive and well-written compared to the ones written by cybercriminals. It might also mimic the writing style of specific individuals.
The widespread use of technology, combined with insufficient cybersecurity measures, lack of right skillset, inadequate legislation in the field of information security, and a low level of public awareness concerning information security, creates favorable conditions for cybercriminals. Moreover, many African countries are facing economic constraints, making it difficult to allocate sufficient funds for cybersecurity.
African governments must develop, implement and regularly update national cybersecurity policies and strategies, involving a wide range of stakeholders in the process.
Establishing a dedicated national institution (Cybersecurity authority) to coordinate cybersecurity activities, respond to cyber incident, monitor threats and help organizations recover from major cyberattacks should be a top priority for governments.
Governments should work on creating and implementing legislation for the protection of personal data. This legislation should combat cybercrime, guarantee the protection of personal data, and maintain the digital security of citizens and organizations.
Regular cybersecurity awareness should be conducted. People should be educated on potential privacy risks when working in virtual environments.
Governments should identify critical information infrastructure, disruption of which could cause non-tolerable events at the level of industries and countries.
Collaboration between governments and industry peers is also recommended to enhance collective defense against cyberattacks and exchange best practices and thoughts.
Organisations should implement best practices in safeguarding personal and corporate data.
Organizations should have an up to date incident response plan that will help in case of cyberattack. The plan should contain steps to take, as well as a list of people and services to reach in case of emergency. This plan should be regularly tested by conducting attack simulations.
Network segmentation might limit an attacker’s exploration of compromised networks. Critical systems in particular should be totally isolated from the rest of the corporate network.
Establishing continuous vulnerability assessment and triage as a basement for effective vulnerability management process
Implementing strict access controls is highly recommended. The principle of least privilege should always be in use for any resource. Multifactor authentication should be deployed wherever possible.
Mr Yusuph Kileo is an award-winning Cyber security and Digital Forensics Expert
E-Business
Galaxy Backbone Tops FG’s Website Performance Ranking

Galaxy Backbone Limited (GBB) has been ranked first overall in the 2025 Federal Government Website Performance Scorecard.

This is a landmark achievement for Nigeria’s digital economy.
The ranking, conducted by the Bureau of Public Service Reforms (BPSR), is the definitive benchmark for digital excellence and transparency across all Ministries, Departments, and Agencies (MDAs).
Professor Ibrahim Adepoju Adeyanju, managing director and CEO of Galaxy Backbone, received the award during a ceremony in Abuja.
He described the feat as a validation of the agency’s“Nigeria First”data sovereignty strategy and its relentless pursuit of service excellence.
This recognition comes as the Federal Government intensifies its push to achieve a fully paperless civil service by December 31, 2025.
GBB has been the primary architect of this transition through its 1Gov Enterprise Content Management (ECM) platform, which now hosts the operations of almost all federal MDAs.
The award adds to a growing list of accolades for Galaxy Backbone in 2025, following its recent win of the “International Standard Excellence Award for Best IT Service Provider.”
As the central hub for government shared services, GBB’s performance serves as a blueprint for other agencies currently undergoing digital transformation.
With its expanded fiber-optic backbone now covering over 13 states and its secure cloud solutions, Galaxy Backbone remains the cornerstone of Nigeria’s vision to become a leading digital nation by the end of the decade.
E-Business
Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Okitipi Samuel, a Nigerian man, has been taken into custody by the Nigeria Police Force for his alleged role in a global cyberattack on Microsoft 365 users.

Benjamin Hundeyin, Force public relations officer, disclosed this on Thursday in Abuja while briefing journalists on the outcome of investigations carried out by the National Cybercrime Centre of the Nigeria Police Force.
Hundeyin said the centre, under the leadership of Ifeanyi Uche, its director and Commissioner of Police, commenced investigations in collaboration with Microsoft, the Federal Bureau of Investigation, the United States Secret Service, and the United Kingdom’s National Crime Agency.
According to him, investigations revealed that a phishing toolkit known as “Raccoon 0365” was used to create fake Microsoft login portals to harvest user credentials and unlawfully access email accounts belonging to corporate organisations, financial institutions, and educational institutions in several countries.
“This investigation commenced following credible intelligence received from Microsoft USA through the FBI, indicating that a malicious phishing toolkit known as Raccoon0365 was being used to create fake Microsoft login portals, harvest user credentials, and unlawfully access the email accounts of corporate organisations, financial institutions, and educational establishments,” Hundeyin said.
He added that between January and September 2025, several reports of unauthorised access to Microsoft 365 accounts were traced to phishing emails designed to mimic legitimate Microsoft login pages, enabling business email compromise, internal phishing, data breaches, and other cyber-enabled fraud.
Hundeyin said digital forensic analysis and cryptocurrency tracing identified wallets connected to the illegal operation.
He noted that operatives were deployed to Lagos and Edo states, leading to the arrest of three suspects identified as Joshua, James, and Okitipi Samuel between September 20 and October 4, 2025.
“Following extensive digital forensic and technical intelligence analysis, the centre conducted cryptocurrency tracing that identified suspicious wallets connected to cash-out schemes.
“Acting on actionable intelligence, operational teams were deployed to Lagos and Edo states, resulting in the arrest of Joshua, James, and Okitipi Samuel. Searches at their residences led to the recovery of mobile devices, laptops, and other digital exhibits linked to the fraudulent scheme,” he said.
Hundeyin identified Okitipi Samuel, also known as “0365” and Moses Felix as the principal suspect and developer of the phishing infrastructure.
He added that investigations confirmed Samuel unlawfully used the email details of one of the arrested individuals without consent to register some of the accounts used in the operation.
The police spokesperson said further investigations revealed that the identities of Joshua and James were used without their consent.
“There was no evidence linking them to the creation or operation of the phishing scheme. They were victims of identity theft,” Hundeyin said.
He said a prima facie case had been established against Samuel for identity theft, unlawful access to computer systems, creation and distribution of malicious software, unauthorised interference with network data, and aiding and abetting fraud.
Hundeyin added that the suspect would be charged under relevant provisions of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2024.
He said the suspect would be prosecuted in Nigeria, noting that the country has the capacity to enforce its cybercrime laws, although extradition could be considered if formally requested through due process.
Hundeyin assured Nigerians that the police, under the leadership of Kayode Egbetokun, inspector-general of Police, would continue to protect the country’s digital ecosystem and urged citizens to practise good cyber hygiene by being cautious when clicking links and sharing personal information online.
Speaking separately, Ifeanyi Uche, director of the National Cybercrime Centre, urged Nigerians to exercise caution online.
Uche advised members of the public to avoid clicking on links from unknown or unexpected sources, noting that such links often contain malware or phishing tools designed to compromise devices and personal data.
He warned that indiscriminate clicking of links or responding to unsolicited emails could lead to unauthorised access to personal and corporate accounts, urging citizens to “wash their cyber hands” by verifying sources before taking action online.
E-Business
Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda

Nigeria has unveiled a comprehensive, multi-pronged strategy designed to localise WSIS+20 commitments. This roadmap accelerates national transformation by prioritising robust infrastructure, transparent internet governance, and advanced cybersecurity through deep stakeholder collaboration.

Unveiled in New York at the Nigerian high-level side event titled “Re-Imagining Digital Cooperation for Sustainable Development: From WSIS+20 Vision to Local Action,” the strategy cements Nigeria’s position as a primary architect of the world’s digital future.
Speaking at the event, the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, CCIE represented by Director, Corporate Planning and Strategy, Dr. Dimie Shively Wariowei said Nigeria’s approach is deliberately aligned with the four core activity areas identified under the ongoing WSIS+20 review process.
According to him, the focus areas provide a practical framework for translating global digital commitments into measurable national outcomes, ensuring that international resolutions drive inclusive growth and sustainable digital development at the country level.
Inuwa identified digital infrastructure as the foundation of effective localisation, noting persistent challenges in extending connectivity to underserved and remote communities. Beyond infrastructure gaps, he highlighted affordability constraints and digital literacy deficits, stressing that addressing these issues remains central to Nigeria’s digital inclusion drive.
He explained that government alone cannot shoulder the burden of nationwide digital infrastructure deployment, given Nigeria’s vast geographical spread, hence the adoption of collaborative Public-Private Partnership (PPP) models. He disclosed that Nigeria, in collaboration with the World Bank, is implementing a major fibre-optic project spanning about 90,000 kilometres nationwide to boost connectivity.
The NITDA DG also revealed that the current National Broadband Plan, which has guided broadband expansion in recent years, is nearing completion, with plans underway to renew and reposition it for the next five years. The renewed plan, he said, will strategically target increased broadband penetration as a catalyst for digital access and economic growth.
On internet governance, Inuwa referenced Nigeria’s active participation in the Internet Governance Forum (IGF), noting that the country successfully hosted its annual national IGF. He said the forum operates on a multi-stakeholder model that brings together government, the private sector, civil society and the technical community to foster cooperation and informed policy dialogue.
Cybersecurity, he added, remains a critical pillar of Nigeria’s localisation efforts. He cited the existing Cybersecurity Act and ongoing efforts to strengthen the legal framework through a reviewed version currently awaiting parliamentary approval. These measures, he said, are designed to mitigate risks associated with increased internet use and to protect users and critical digital infrastructure.
Inuwa further stressed Nigeria’s ambition to play a leadership role in advancing digital cooperation across Africa through inclusive, multi-stakeholder engagement. He underscored the importance of coordinated national data collection, noting that reliable, country-specific data is essential for tracking progress and presenting Africa’s digital development story on the global stage.
He concluded that sustained engagement and follow-up actions arising from the WSIS+20 review would strengthen digital cooperation among African countries and ensure that global digital commitments translate into tangible national and regional impact.
Stakeholders commended Nigeria’s efforts in the digital space, acknowledging the country’s growing role in shaping Africa’s digital future.
Earlier, Ms. Jennifer Chung, Co-Convener of the Informal Multi-Stakeholder Sounding Board (IMSB), praised Nigeria for convening a broad-based, multi-stakeholder delegation and for its commitment to the meaningful implementation of WSIS+20 outcomes.
Chung stressed the growing demand for localised WSIS follow-up mechanisms, noting that platforms such as the annual IGF, National and Regional IGF Initiatives (NRIs), and youth-led forums are vital for tracking progress towards the 2030 Agenda and Africa’s Agenda 2063.
She described the WSIS+20 review as a critical step toward effective monitoring, reliable data collection and evidence-based evaluation, particularly for developing countries in the Global South. According to her, these measures are essential to achieving WSIS targets and ensuring that no region is left behind.
Drawing parallels with the Asia-Pacific region, Chung noted that challenges around affordable and meaningful connectivity remain widespread across developing economies. She emphasised that expanding broadband penetration and reducing the cost of access are crucial to closing digital divides in Africa, Asia-Pacific and other parts of the Global South.
She also highlighted the need to enable active citizen participation in emerging technologies, including artificial intelligence and future innovations such as quantum technologies, stressing that inclusive digital access is key to maximising the benefits of digital transformation.
Reflecting on the WSIS+20 review process, Chung praised the innovative and inclusive approach adopted through the informal multi-stakeholder sounding board, describing it as one of the first of its kind in global digital governance. She called for sustained collaboration among governments, the private sector, civil society and the technical community to carry the WSIS vision from global commitments to local action.
News3 days agoUS Begins Partial Visa Ban on Nigerians January 1
News3 days agoGlo Extends Christmas Greetings, Urges Unity and Care for Others
E-Financial2 days agoFIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
News3 days agoDPLAN Threatens NDPC with Legal Action for Setting aside $32.8m Meta Fine
E-Financial3 days agoNOVA Bank Opens Regional Office in Owerri
Telecom2 days agoOyedele Dismisses Claims Bank Accounts Without TIN Will Be Frozen
E-Financial2 days agoAfDB Group Mobilises Global Private Capital to Close Africa’s Financing Gap
E-Financial3 days agoNaira Stability, Lower Borrowing Costs Expected in 2026 — CBN Survey
















