Connect with us

E-Business

Analyst Picks Holes in Proposed AU Cybersecurity Convention

Published

on

cyberoam security.jpg
Kindly share this post

A proposed African Union (AU) convention seeking to step up the fight against cybercrime across Africa has critics up in arms over its potential to curb internet freedoms, according report by ITWeb Africa.

The African Union Convention on Cyber Security (AUCC), awaiting voting on in January 2014, proposes “establishing a credible framework for cyber security in Africa through organisation of electronic transactions, protection of personal data , promotion of cyber security, e-governance and combating cybercrime.”

The AU is, apparently, seeking to establish the convention because of what it says are African states’ “dire need of innovative criminal policy strategies that embody states, societal and technical responses to create a credible legal climate for cyber security.”

The move to introduce the convention comes as cyber crime levels in Africa are growing.

It could be recalled that the Norton Cybercrime Report for 2012, the likes of South Africa hosts the third-highest number of cyber crime victims in the world, behind only Russia and China.

In addition, the South African Cyber Threat Barometer 2012/13 put the total direct losses to cybercrime in South Africa between January 2011 and August 2012 at R2.65 billion.

But Kenyan based Strathmore University’s Centre for Intellectual Property and Information Technology Law (CIPIT) has hit out at the proposed AU cyber security convention and called for the convention not to go ahead in its current form.

The centre says the convention, if adopted as is, could abuse Africans’ right to privacy, harm freedom of expression, introduce legislative overkill and place too much power in the hands of judges.

A draft version of the convention allows judges, in the “public interest”, to call for the interception of individuals’ electronic communications without permission from these individuals.

“Our first concern is the omission to the right to privacy,” Rene Enoakpar of Strathmore University’s CIPIT told ITWeb Africa.

“The issue of public interest is complex because it has no unified meaning,” he said.

Enoakpar explained to ITWeb Africa that regulatory agencies in Africa could have varied interpretations of what is in the public interest.

He also said that these interpretations could reflect interests of political actors, especially governments, which in turn makes this provision problematic.

Furthermore, the ability to interfere with traffic data without permission could risk freedom of expression on the continent as well.

“With this provision, we think the right to freedom of expression will be seriously curtailed,” Enoakpar said.

Other aspects of the convention introduce what Enoakpar said is “legislative overkill.”

Enoakpar said the bill wants increased focus on crimes committed with online resources or computers. But he said this provision could make it possible for aggravation in situations where, for example, a criminal robs a bank after sending an email.

Other concerns regarding ‘legislative overkill’ include parts of the convention that want corporate bodies to be held responsible for offences that individuals commit using the corporations’ technology.

The convention also wants service providers to conduct vulnerability testing for their technologies: a requirement that could hold back e-commerce on the continent, Enoakpar said.

As a last concern, Enoakpar said the convention “grants absolute power to judges.”

Enoakpar added that judges on the continent are not adequately trained to deal with cybercrime and cyber security, making this absolute power even more problematic.

In a bid to stop the convention then from being adopted in its current form, the Strathmore’s CIPIT has started a campaign to oppose the ratification of it by the AU.

The centre has petitioned Kenya’s parliament through an open letter regarding the convention. The petition is sponsored and endorsed by the likes of search giant Google and technology innovation centres iLabAfrica and Nairobi’s iHub.

“We call attention to the fact that the context within which it is being passed will make the convention unfeasible,” Enoakpar told ITWeb Africa.

“We think that there is need for substantive revision,” Enoakpar said.

However, while the CIPIT and its supporters are looking to stop the AU cyber security convention from being adopted in its current form, the organisation does nevertheless want an Africa focused convention on cyber security.

African countries such as South Africa are looking to implement data privacy laws such as the Protection of Personal Information (POPI). But for those countries that do not have such endeavours as yet, there is a need for a guiding framework such as an AU cyber security convention, Enoakpar told ITWeb Africa.

But that framework cannot jeopardise civil liberties, contain legislative overkill or hand over too much power to judges, Enoakpar said.

“The nature of cybercrime is transnational, and that notwithstanding I know many African countries do not have an effective legislation on cybercrimes.”

“A good starting point would be for the African Union (AU) to come up with a model law on cybercrime,” said Enoakpar.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Chams Carves Out Subsidiary to Support Africa’s Digital Transformation

Published

on

Kindly share this post

Chams Holding Company Plc, (Chams Holdco), digital payments and verification firm, has created a new subsidiary which is expected to strengthen the push for Africa’s digital transformation.

Chams Carves Out Subsidiary to Support Africa’s Digital Transformation

The creation of the new subsidiary, ChamsCorp Plc, which took effect from February 1, was made known in a filing to the Nigerian Exchange Limited , according to an announcement.

Chams said that the new subsidiary, which is its 5th, will give a new dimension to its more than 40 years of work in building the digital ecosystem not only in Nigeria, but across the continent and the rest of the world.

The newly created company will focus on three major aspects, namely the manufacturing of digital devices and development of digital infrastructure and services; data center design, construction and operations, and the development and implementation of AI infrastructure and intelligent systems.

It will also contribute to its parent company’s digital ID, digital verification, and trust services offering.

“For nearly four decades, we’ve enabled trust in transactions and identity. Now, we go furthe”

Chams is expanding into AI, data centre infrastructure, and intelligent systems, building the backbone for Africa’s digital transformation,” the company wrote in a LinkedIn post.

“We are not just participating in the future. We are engineering it,” the message added.

According to the Chams announcement, a decision of its Board of Directors appointed members of the pioneer board of ChamsCorp Plc, with renowned banker Mohammed Bashir Yunusa designated as Chairman.

He is described as a well-known finance expert who specializes in deal structuring, corporate and retail finance, business strategy, digital transformation, and Islamic Finance and Banking.

With more than 10 years of experience in the financial services industry, Yunusa currently serves as head of Consumer and Digital Banking for Non-Interest Banking Retail at Sterling Bank Nigeria, and will also serve as a non-executive director on the board.

“Chamscorp is designed to take our most ambitious ideas to market at speed and scale. As Africa’s digital economy evolves, we are focused on delivering transformative solutions that empower governments, businesses, and citizens alike,” Femi Oyenuga, CEO, Chams, commented on the development.

Chams has over the years played a major role in contributing to Nigeria’s digital ID ecosystem development to facilitate access to financial services.

In 2023, the company Group Chairman publicly stated that in providing such digital services to the Nigerian government, it had incurred debts estimated at $100 million and were planning to change their business model as a result.


Kindly share this post
Continue Reading

E-Business

Nigeria, South Africa Drive Stablecoin Spending in Africa

Published

on

Kindly share this post

Africa has emerged as the global frontrunner in stablecoin adoption, with Nigeria and South Africa leading the charge with the fastest adoption rate, as transactions surge across the continent.

This is according to the Stablecoin Utility Report, compiled by YouGov on behalf of fintech firm BVNK.

The study, conducted in partnership with Coinbase and Artemis, surveyed over 4 600 early adopters and crypto-natives in 15 countries across five continents.

It shows people are turning to stablecoins to move money more quickly, securely and affordably – and how this shift in behaviour is becoming a worldwide trend beyond its roots in the Global South.

Stablecoin adoption is accelerating particularly rapidly across Africa in 2026, driven by currency volatility, high inflation and the need for cheaper, faster cross-border payments, it finds.

The Stablecoin Utility Report shows that 79% of African respondents hold stablecoins − the highest ownership rate globally − while 76% say they intend to acquire them in the near future.

Nigeria and SA lead the continent in everyday stablecoin spending, highlighting a shift from holding digital dollars as a store of value, to actively using them for commerce.

The appetite to be paid in stablecoins is even stronger: 95% expressed interest in receiving income via dollar-pegged digital assets, whether for salaries, freelance work or cross-border services, according to the study.

Anthony Yim, co-founder and CEO of crypto research firm Artemis, explains: “We’re experiencing a significant behavioural shift in the way people are using stablecoins.

“Crypto natives and early adopters are fully on board with stablecoins, using them to pay and be paid. This is driving mainstream, global adoption – stablecoin supply has increased 500% over the past five years. Alongside the passage of multiple legislation initiatives in numerous countries, it’s clear we’re experiencing a tipping point.”

From hedge to household spending

Unlike in some developed markets where stablecoins are viewed primarily as a payments upgrade, African users are deploying them as practical financial tools. Key use cases include hedging against inflation, facilitating remittances and funding day-to-day purchases.

The report finds that 92% of African respondents say the condition of their national economy directly affects their stablecoin usage − a reflection of currency volatility, capital controls and high remittance costs across several markets.

Africa also recorded the highest likelihood globally (89%) of users adopting stablecoin-linked debit cards, signalling demand for tighter integration between digital assets and traditional payments.

Infrastructure, not ideology

Taken together, the findings reinforce a broader thesis: stablecoins are evolving beyond a payment method into payments infrastructure, states the report.

For individuals, this means receiving income faster and at lower cost. For businesses, it enables borderless treasury operations and supplier payments. For financial platforms, it opens opportunities to embed stablecoin wallets, debit cards and cross-border settlement into core offerings.

This demand for institutional-grade integration is evident globally, with 77% of survey respondents saying they would open a stablecoin wallet if offered by their primary bank or fintech provider.

As adoption deepens in Africa and regulatory frameworks mature in developed markets, the data suggests stablecoins are no longer a niche crypto product − but a structural layer in the future of global money movement, notes BVNK.


Kindly share this post
Continue Reading

E-Business

Kaspersky Reports 15% Growth in Malicious email Attacks in 2025

Published

on

Kindly share this post

According to Kaspersky telemetry, almost every second email – 44.99% of global traffic – was spam in 2025. Spam consists not only of unsolicited emails, but can also include various email threats such as scam, phishing and malware.

In 2025, individuals and corporate users encountered over 144 million malicious and potentially unwanted email attachments, representing a 15% increase compared to the previous year figures.

In 2025, APAC had the largest share of email antivirus detections: it reached 30%, followed by Europe with 21%. Next came Latin America (16%) and the Middle East (15%), Russia and CIS (12%) and Africa (6%). As for individual countries, China had the highest rate of malicious and potentially unwanted email attachments, with the share of email antivirus detections of 14%. Russia ranked second (11%), followed by Mexico (8%), Spain (8%) and Turkey (5%).

Email antivirus detections peaked moderately in June, July and November.

Key trends in email spam and phishing

Kaspersky’s annual analysis has also identified several persistent trends in the email spam and phishing threat landscape that are expected to continue into 2026:

  • Combination of various communication channels. Attackers lure email users into switching to messengers or calling fraudulent phone numbers. For instance, scam investment mailings may redirect victims to fake websites, where they are asked to provide their contact information, and then cybercriminals will follow up with a phone call.
  • Usage of diverse evasion techniques in phishing and malicious emails. Threat actors frequently try to disguise phishing URLs, for example, with the help of link protection services and QR codes. These QR codes are often embedded directly in email bodies or within PDF attachments, which not only conceals phishing links but also encourages users to scan them on mobile devices, potentially exploiting weaker security measures than corporate PCs.
  • Mailings exploiting diverse legitimate platforms. For example, Kaspersky experts discovered a fraudulent tactic that abuses OpenAI’s organisation creation and team invitation features to send spam emails from legitimate OpenAI addresses, potentially tricking users into clicking scam links or dialing fraudulent phone numbers. Additionally, a calendar-based phishing scheme, which originated in the late 2010s, resurfaced last year with a focus on corporate users.
  • Refining tactics in business email compromise (BEC) attacks. In 2025 attackers attempted to become even more persuasive by incorporating fake forwarded emails into their correspondence. These emails lacked thread-index headers or other headers, making it difficult to verify their legitimacy within an email conversation. 

“Email phishing shouldn’t be underestimated. Our report reveals that one in ten business attacks starts with phishing, with a significant proportion being Advanced Persistent Threats (APTs). In 2025, we saw an increase in the sophistication of targeted email attacks. Even the smallest details are meticulously crafted in these malicious campaigns, including the composition of sender addresses and the tailoring of content to real corporate events and processes.

“The commodification of generative AI has significantly amplified this threat, enabling attackers to craft convincing, personalised phishing messages at scale with minimal effort, automatically adapting tone, language and context to specific targets,” comments Roman Dedenok, anti-spam expert at Kaspersky.

 


Kindly share this post
Continue Reading

Trending