Connect with us

E-Business

Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report

Published

on

Kindly share this post

The 2025 Kaspersky Security Bulletin provides a review of the major cybersecurity trends of the year and offers a look towards the future of cybersecurity, including within the financial sector.

According to the report, in 2025, the financial sector navigated a rapidly evolving cyber landscape, with malware spreading through messaging apps, AI-assisted attacks, supply chain compromises, and NFC-based fraud.

Based on Kaspersky Security Network statistics for the year (from November 2024 to October 2025), 8.15% of users in the finance sector globally faced online threats and 15.81% faced local (on-device) threats. 1,338,357 banking trojan attacks were detected by the company’s solutions. 12.8% of B2B finance sector companies faced ransomware this year – that marks a 35.7% increase in unique users in 2025 compared to the same period of 2024.

The company’s experts highlight the following cybersecurity trends and cases shaping the financial sector in 2025:

Large-scale supply chain attacks: the financial sector faced a series of unprecedented supply chain attacks, which are incidents that exploit vulnerabilities in third-party providers to reach their primary targets. The breaches demonstrated how vulnerabilities in third-party providers can cascade through national payment networks, affecting even central systems.

Organised crime converging with cybercrime: organised crime is increasingly combining physical and digital methods, creating more sophisticated and coordinated attacks. Financial institutions faced threats that blend social engineering, insider manipulation, and technical exploitation.

Old malware, new channels: cybercriminals increasingly exploit popular messaging apps to spread malware, shifting from email phishing to social channels. Banking trojans are being rewritten to use messaging platforms as a new distribution vector, enabling large-scale infections.

AI scales malware to new heights: this year, AI-enabled malware has increasingly incorporated automated propagation and evasion techniques, allowing attacks to spread faster and reach a larger number of targets. This automation also shortens the time between malware creation and deployment.

Mobile banking attacks and NFC fraud: Android malware using ATS (Automated Transfer System) techniques automate fraudulent transactions, altering transfer amounts and recipients in real time without the user noticing. NFC-based attacks have also emerged as a key trend, enabling both physical fraud in crowded places and remote fraud via social engineering and fake apps mimicking trusted banks.

Blockchain-Based C2 Infrastructure is on the rise: crimeware attackers increasingly embed malware commands in blockchain smart contracts, targeting Web3 to steal cryptocurrencies.

This method ensures persistence and makes the infrastructure extremely difficult to remove. Using blockchain for C2 operations allows attackers to maintain control even if conventional servers are shut down, highlighting a new level of resilience in cyberattacks.

Ransomware presence: these types of attacks remained a persistent threat for the financial sector with 12.8% of B2B finance organisations globally affected in November 2024 through October 2025. The figure for Africa is similar, with 12.9% of B2B finance organisations affected by ransomware from November 2024 through October 2025.

Disappearance of certain malware families: some malware families are likely to disappear, as their activity depends directly on the operations of specific criminal groups.

“In 2025, financial cyber threats evolved into a complex landscape, with attacks hitting businesses and end users alike. Criminal groups increasingly combined digital tools, insider access, AI and blockchain to scale operations, forcing organisations to secure not only their systems but also the human networks that support them,” said Fabio Assolini, Head of the Americas & Europe units at Kaspersky GReAT.

Kaspersky’s predictions for what finance cybersecurity might face in 2026, include:

Banking Trojans will be rewritten for WhatsApp distribution: criminal groups will increasingly rewrite and scale banking trojans distribution and abuse messaging apps like WhatsApp to target corporate and government organisations that still rely on desktop-based online banking. These environments are where Windows-based banking trojans thrive.

Growth of deepfake/AI services for social engineering: the trade in realistic deepfakes and AI-powered campaigns is expected to expand even more, fueling scams around job interviews and offers, driving underground demand for tools that fully bypass Know Your Customer (KYC) verification.

Appearance of regional info stealers: as Lumma, Redline and other stealers are still active, we expect to see the appearance of regional info stealers, targeting specific countries or regions, expanding the use of malware-as-a-service model.

More attacks on NFC payments: as a key technology used in payments, we’ll see more tools, more malware and attacks directed against NFC payments, in all types.

The advent of Agentic AI malware: agentic AI malware is characterised by its ability to dynamically alter behaviour mid-execution. Unlike conventional malware that relies on pre-defined instructions, agentic variants are designed to assess their environment, analyse their impact, and adapt their tactics on the fly.

This means that a single piece of malware could exhibit a range of behaviours, from initial infiltration to data exfiltration or system disruption, all in response to the specific defences and vulnerabilities it encounters.

Classic fraud will obtain new delivery: fraud will remain a major threat to end users, but its delivery methods will keep evolving. As new services and messaging platforms emerge, attackers will continue to adapt their tactics to the channels where their target audience is most active.

The persistence of ‘out of box’, pre-infected devices: the threat of counterfeit smart devices sold already infected with trojans (such as Triada) will continue to evolve.

These trojans often come with extensive capabilities, including the ability to steal banking credentials, and affect not only “gray” Android smartphones but also other smart devices such as TVs.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

The Case for a Holistic AI-Led Approach to Cybersecurity in the Fintech Ecosystem

Published

on

Kindly share this post

As digital financial services continue to grow globally, cyber threats are becoming more advanced, more automated, and more financially damaging. In Nigeria, where digital payments are becoming a part of everyday life, these threats pose significant risks to both consumers and financial institutions.

Industry reports continue to show that account takeover remains one of the dominant fraud issues in Nigeria, accounting for a significant share of 43% banking-related losses reported to Nigeria Inter-Bank Settlement System (NIBSS). Between early 2023 and mid-2025, the financial sector is estimated to have lost hundreds of billions of naira to digital fraud, while 281,500  user accounts have been exposed through breaches and leaks in Q1 alone.

Responding to this kind of threat environment requires more than a single line of defence. It requires a broader security model that combines intelligence, automation, identity verification, and ecosystem collaboration.

PalmPay, leading digital payments platform, has built its cybersecurity framework on a multi-layered security architecture designed to anticipate, detect, and mitigate risks before they escalate. Rather than relying on a single line of defence, PalmPay integrates AI-driven fraud monitoring, continuous risk assessment, behavioural analysis, and multi-layer authentication to strengthen account protection.

One important part of this approach is biometric and facial verification. As account takeover attempts increasingly exploit stolen credentials, identity verification has become one of the most effective tools in combating fraud. By combining facial verification with PIN and OTP authentication, PalmPay introduces multiple layers of protection that help ensure access is tied to the legitimate account owner, significantly reducing the risk of unauthorized access.

Complementing this is PalmPay’s Fraud Case Management System that enhances how potential fraud incidents are detected, analysed, and managed. By centralising fraud intelligence and enabling faster response times, the system helps security teams identify emerging patterns and intervene more proactively.

PalmPay’s Anti-Fraud Manager, Omoruyi Aiyudu, commented: “Fraud prevention today requires a shift from isolated security controls to a connected, intelligence-driven security ecosystem. At PalmPay, we leverage AI-driven fraud detection, behavioural analytics, and multi-layered authentication to identify and mitigate risks in real time. We continue to invest in advanced technologies to strengthen account security and build a safer, more resilient digital financial ecosystem for our users.”

Ecosystem Collaboration

Cybersecurity does not stop at internal controls. Stronger outcomes also depend on collaboration across the wider financial ecosystems.

PalmPay continues to work with regulators, law enforcement agencies and other stakeholders to support stronger cybercrime detection and response capabilities. One example is collaboration with the Nigerian Cybersecurity Unit of the Nigeria Police Force (NPF), including support through the provision of advanced equipment designed to enhance fraud detection and investigation capacity.

The company also recently collaborated with the Nigerian Data Protection Commission on a specialized data protection training to enhance internal data governance practices and advance compliance with the Nigeria Data Protection Act (NDPA) 2023.

These efforts reflect a broader view of security, one that recognizes that customer protection depends not only on technology, but also on governance, institutional cooperation, and responsible data handling.

PalmPay also believes that effective cybersecurity requires active participation from every stakeholder in the digital ecosystem. This is why user awareness remains an important part of its approach. Technology can reduce risk, but informed behaviour remains one of the strongest protections against fraud.

As cyber threats continue to evolve, the future of cybersecurity will depend on organisations adopting intelligent, adaptive, and collaborative security models. AI-led security solutions are no longer optional; they are becoming essential to staying ahead of increasingly sophisticated threats, strengthening customer trust, and the digital economy.


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Published

on

Kindly share this post

Galaxy Backbone (GBB) Limited has mapped out strategies to strengthen Nigeria’s digital infrastructure in order to make the country globally competitive in the face of Artificial intelligence, blockchain, cloud computing and other emerging technologies aimed at securing the digital future of the country.

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Prof Ibrahim Adeyanju, managing director and CEO of GBB, made this known during a press conference to unveil a flurry of activities to celebrate the 20th anniversary of GBB in Abuja on Monday, stressing that Galaxy Backbone has evolved from a connectivity provider into one of Nigeria’s most strategic digital infrastructure institutions.

Galaxy Backbone is a public enterprise of the Federal Government of Nigeria incorporated in 2006 with the primary mandate of setting up and operating a unified Information and Communication Technology (ICT) infrastructure platform that addresses the connectivity, transversal and other technology imperatives for Ministries, Departments and Agencies (MDAs) of the federal government and private entities.

He said in the last 20 years, the agency has invested in world-class data centre infrastructure, including uptime certified Tier III and Tier IV facilities that provide secure, resilient and reliable environments for hosting missions critical to systems and applications.

He noted that these facilities strengthen data sovereignty, ensure business continuity and help keep Nigeria’s most critical digital assets secure.

“Through our cloud infrastructure and the 1Government Cloud platform, government institutions can access scalable digital services without the burden of building costly infrastructure independently. This shared-services model improves efficiency, reduces costs and accelerates innovation.

“We have delivered platforms such as GovMail (the homegrown Official government email), collaboration tools, hosting services, connectivity solutions and shared applications that support thousands of public servants and hundreds of institutions every day,” he said.

He emphasized that the true value of Galaxy Backbone is not measured by kilometres of fibre, data centres or technology alone but by impact.

He explained that the GBB fibre infrastructure today spans almost 30 states of the federation, connecting government institutions and creating the foundation for digital government even as he pledged that the remaining states and local areas will all be captured in due course.

On cyber security, the GBB boss noted that the agency has strengthened cybersecurity capabilities and continues to invest in protecting government systems and critical national digital assets, against cyber-attacks.

“We have the digital infrastructure and we are collaborating with partners to use these emerging technologies. We also have a top tier cyber security operation center and they are multilayered such that even when there is a spike in cyber-attacks none of them have been successful so far.

He added that the GBB is collaborating with other government agencies like the National Security Adviser, The Nigeria Police, and Nigerian Communications Commission (NCC) National Information Technology Development Agency (NITDA) National Identity Management Commission (NIMC) to ensure that government information is protected.

Ibrahim Sani Mohammed, executive director Finance and Corporate Services of the GBB, while fielding questions noted that the agency has created enormous value and has contributed immensely in the digital ecosystem of Nigeria helping to support small and medium enterprises (SMEs).

Olusegun Olulade, executive director Customer Centrality and Marketing of the GBB, said that customers have remained the formidable partners in the GBB journey of 20 years, adding that the agency has developed the mechanism to ensure customer satisfaction as it intensifies efforts to build trust.


Kindly share this post
Continue Reading

E-Business

AI-Powered Cyber Threats Put Nigerian Banks on Alert

Published

on

Kindly share this post

Nigerian banks are increasingly embracing artificial intelligence (AI) to improve customer service, strengthen fraud detection, and streamline operations.

AI-Powered Cyber Threats Put Nigerian Banks on Alert

Pic credit….gdprlocal.com

However, the same technology driving innovation could also expose the country’s financial system to unprecedented cyber risks, according to a recent warning from the International Monetary Fund (IMF).

The IMF has cautioned that advanced AI tools are rapidly enhancing the capabilities of cybercriminals, making it easier and faster to identify and exploit vulnerabilities in banking systems, payment infrastructure, and digital platforms.

For Nigeria, where digital banking transactions have surged in recent years and financial institutions are becoming more interconnected, the implications could be significant.

The warning comes at a time when Nigerian banks are investing heavily in digital transformation.

From AI-powered customer support systems to automated fraud monitoring tools and digital lending platforms, financial institutions are relying more than ever on technology to drive growth and improve efficiency.

Yet experts warn that this digital expansion is also widening the attack surface for cybercriminals.

The IMF noted that advanced AI models can dramatically reduce the time and expertise required to discover software vulnerabilities.

This means attackers can launch more sophisticated and coordinated cyberattacks against multiple institutions simultaneously.

For Nigeria’s banking sector, which depends on common payment rails, cloud infrastructure, telecommunications networks, and shared service providers, a major cyber incident could quickly spread across the financial ecosystem.

Nigeria’s financial sector has undergone a remarkable digital revolution over the past decade.

Data from the Central Bank of Nigeria (CBN) show that electronic payments now account for trillions of naira in monthly transactions, driven by mobile banking, instant payments, fintech innovation, and the growing adoption of digital channels.

The success of platforms such as the Nigeria Inter-Bank Settlement System (NIBSS) Instant Payments network has made banking more accessible and efficient.

However, it has also increased dependence on interconnected digital infrastructure.

According to the IMF, this interconnectedness creates systemic vulnerabilities.

A cyberattack targeting a critical service provider, cloud platform, telecommunications network, or payment gateway could disrupt services across multiple banks at the same time.

Unlike traditional bank robberies or isolated cyber incidents, AI-enabled attacks have the potential to trigger widespread operational disruptions, affecting payment processing, customer access to funds, and confidence in the banking system.

The IMF warns that extreme cyber incidents could evolve from operational challenges into broader financial stability concerns.

If multiple banks are simultaneously affected by a cyberattack, customers may experience service outages, delayed transactions, or restricted access to deposits.

Such disruptions could undermine public confidence and create liquidity pressures, especially if panic withdrawals or transaction bottlenecks occur.

The concern is not merely theoretical.

Over the past few years, Nigerian financial institutions have experienced increasing levels of cyber fraud, phishing attacks, identity theft, and ransomware threats.

Although regulators and banks have improved cybersecurity frameworks, AI-driven attacks could significantly raise the sophistication and scale of these threats.

The IMF believes that the growing concentration of technology services could further amplify the risks.

Many Nigerian banks rely on a relatively small number of software vendors, cloud providers, telecommunications operators, and payment infrastructure providers. A successful attack on one critical provider could have cascading effects across the entire banking system.

This concentration risk is becoming more pronounced as financial institutions increasingly adopt AI solutions from a limited number of global technology companies.

Despite the risks, AI is also emerging as one of the most powerful tools available to banks in defending against cyber threats.


Kindly share this post
Continue Reading

Trending