Connect with us

News

Nigeria’s Financial, Telecoms’ Firms Hit by 586,130 Cyber Attacks in Six Months

Published

on

Kindly share this post

Cybervergent, a cybersecurity-focused technology company, at the weekend released its half year cyber threat report on the activities of hackers that focus their attacks on Nigeria’s financial institutions and telecoms companies, revealing how it detected 586,130 attacks on organisations that it manages in Nigeria.

Nigeria’s Financial, Telecoms Firms Hit by 586,130 Cyber Attacks in Six Months

The attacks mostly external, were monitored from January to June 2024.

Among the 586,130 attacks launched on various organisations, Cybervergent was able to resolve 226,103 of the attacks by automation, while 19,920 endpoints were protected by Cybervergent.

According to the report, events analysed by Cybervergent’s Security Operations Centre (SOC), reached 304,522, while all potentially malicious events analysed by Cybervergent within the same six months period, reached 42,200.

Analysing the report, Mr. Gbolabo Awelewa, chief solutions officer at Cybervergent, said with the increasing threat in cyberspace, organisations must ensure that regular application and systems updates are carried out on existing applications and systems to prevent the attacks at scale.

“As we move forward, our Cyber Operations Centre remains steadfast in its mission to anticipate, detect, and thwart evolving threats that seek to compromise the integrity of digital assets. With a deep understanding of the threat landscape and a relentless pursuit of innovative security solutions, we are poised to continue our unwavering defense of the financial sector and other industries’ digital landscape, safeguarding organisations’ trust and confidence in the face of ever-changing cybersecurity challenges,” Awelewa said.

Highlighting the threat actors that targeted Nigeria in the first half of the year, Awelwewa listed them to include: Gelsemium, Equation Group, Lyceum, Gamaredon, Circus Spider, Mirage, Common Raven, Bronze Highland, Earth Krahang, as well as Insider Threat Syndrome.

According to him, Gelsemium is a sophisticated cyber espionage group known for its targeted attacks on high profile organisations across various sectors.

“They use custom malware and advanced techniques to evade detection, and their target is on public administration, educational services and national security,” he said.

Awelewa described the different types of insider threats to include: Disgruntled Employees, Accidental Insiders and Negligent Insiders. He explained that motivated by anger, financial gain, or a feeling of being benched, the disgruntled employee could inflict serious damage, while accidental insiders are those that capitalise on mistakes of others to launch an attack on the organisation.

He said the negligent insiders are those that reveal their credentials to others or forget to lock their laptops when leaving the office, advising on staff duty rotation and compulsory leave for all staff.

The report highlighted cybersecurity trends that organisations and institutions must tackle in the second quarter of 2024 as Zero-Day Exploits, where hackers exploit unknown vulnerabilities before anyone can patch them; Cloud Security Focus, since every organisation and institution is moving to the cloud; Cybercrime as-a-service, which allows hackers to launch frequent attacks; and Ransomware Surge, with attackers likely to use more sophisticated encryption and sneaky tactics to avoid detection and maximise the impact, including insider threats.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

News

Experts Reveal a Steady Decline of High-severity Incidents Over the Years

Published

on

Kindly share this post

According to the ‘Anatomy of a Cyber World: Global Report by Kaspersky Security Services’, there has been a noticeable decline in the percentage of high-severity incidents over the past few years.

While 2021 recorded the highest proportion at 14.3%, 2025 experienced the lowest in six years at just 3.8%. This trend indicates that many attack attempts were quickly detected and effectively mitigated by Kaspersky MDR experts, preventing their severity from escalating beyond medium levels.

High-severity incidents are defined as attacks involving direct human involvement that result in a significant impact on the customer’s IT infrastructure. In 2025, the number of such incidents detected by Kaspersky MDR decreased by 19% compared to 2024, highlighting improvements in early detection capabilities and more effective remediation efforts among Kaspersky MDR clients.

A detailed analysis of the root causes of these incidents in 2025 reveals the following insights:

Human-driven attacks accounted for approximately 23% of high-severity incidents. Although this represents a slight decrease from 2024, they continue to be the primary cause of serious breaches.

Kaspersky detected such attacks in nearly 21% of customers, demonstrating that motivated adversaries persist in bypassing automated defences. Despite advancements in automated detection tools, these highly skilled attackers still find ways to evade security measures.

Confirmed cyber exercises like Red Teaming made up over 23% of incidents. When activity is verified as part of security testing, it’s often classified as infrastructure false positives, though customers frequently report them as incidents.

Social engineering ranked third, responsible for over 15% of high-severity attacks and affecting nearly 18% of organisations. These are classified as high-severity when successful and not automatically remediated, often leading to security awareness recommendations.

Security policy violations constituted just under 14% of all cases, involving legitimate accounts performing suspicious actions like data exfiltration. Malware incidents represented less than 12%, while artifacts from past attacks, or APT traces, were found in over 7% of cases. Vulnerability detection, though not core focus for Kaspersky MDR, was reported in fewer than 5% of incidents.

“The decline in high-severity incidents highlights the critical importance of adopting a proactive cybersecurity strategy. Human-led solutions such as Managed Detection and Response (MDR) and Incident Response remain essential in combating sophisticated, human-driven threats.

To further enhance the effectiveness and efficiency of in-house security teams, organisations should incorporate advanced, automated solutions like Extended Detection and Response (XDR), which provide improved visibility and enable faster responses.

Additionally, leveraging SOC consulting services can assist in building a robust Security Operations Center from the ground up or optimising an existing one for maximum performance.

An integrated approach to hybrid security operations empowers organisations to detect threats early, contain them swiftly, and ultimately prevent severe breaches from occurring,” comments Sergey Soldatov, Head of Security Operations at Kaspersky.

 

 

 

 

 


Kindly share this post
Continue Reading

News

Google, UpSkill Universe Relaunch Hustle Academy to Bring Free AI Skills to Africans

Published

on

Kindly share this post

Google and UpSkill Universe, Sub-Saharan Africa’s leading AI and business skills training partner, have announced a major redesign of the Google Hustle Academy programme.

For the first time, the free training initiative is open to everyone, not just business owners. The new curriculum is focused on equipping individuals and entrepreneurs with practical AI skills.

Small businesses are the engine of Africa’s economy, creating over 80% of jobs on the continent. To help them grow, the Hustle Academy was launched in 2022, providing bootcamp-style training on business strategy, digital skills, AI, and leadership. The program has since trained over 18,000 SMEs, with many reporting increased revenue and job creation.

Now, as AI reshapes the job market, the program is evolving. The 2026 edition is built for anyone in Sub-Saharan Africa, including employees, students, and jobseekers, who wants to use AI to advance their career.

To meet the needs of a diverse audience, the new format includes short, 60-minute webinars and more immersive, high-impact bootcamps. These sessions are laser-focused on putting AI to work immediately in areas like digital commerce, marketing, and growth strategy.

Speaking about the academy, Gori Yahaya, Founder & CEO UpSkill Universe said “The 2026 Hustle Academy is designed to close the AI Skills gap with hands-on training that is short, focused, and immediately useful. AI is reshaping how businesses win and how careers are built, right across this continent.

“We’re excited to renew our partnership, now in its fifth year with Google, combining their global AI leadership with our deep regional AI expertise. The next wave of AI leaders will come from this continent. We are making sure they are ready.”

The Hustle Academy initiative has strengthened digital competitiveness across emerging African economies by enabling SMEs to move beyond AI awareness to practical implementation, positioning them for sustained growth in an increasingly AI-driven business environment.

“We believe that the future of Africa’s digital economy lies in the hands of individuals and entrepreneurs alike. Our new strategy focuses on scaling reach by training individuals in the latest AI-centered tools and techniques,” said a Google representative.

 


Kindly share this post
Continue Reading

News

Lagos Govt Drags Top Firms to Court Over Billion-Naira Tax Debts

Published

on

Kindly share this post

Lagos State has dragged 45 individuals and firms, including Bi-Courtney Aviation, DAAR Communications and Leaders & Company, to revenue court for tax debts running into billions of naira.

Lagos Govt Drags Top Firms to Court Over Billion-Naira Tax Debts

Lagos Govt

Bi-Courtney, operators of Murtala Muhammed Airport Terminal Two, faces N38.7 million claim; DAAR, behind Africa Independent Television, owes N22.4 million; ThisDay publishers Leaders & Company allegedly skip N67.1 million.

GMT Energy Resources tops corporates at N145.8 million, followed by Sheriff Deputies at N132.1 million; others like Heyden Petroleum, AA Rescue, BRT operator Primero also listed.

Individuals owe N13.5 million to N35 million each.

Attorney-General Lawal Pedro said suits followed ignored notices, aiming to enforce laws and fund infrastructure.

More defendants: IENG Nigeria, James Fisher, V Care Diagnostics, Venture Garden, Saro Africa, Barry Callebaut, Native Media, First Consulting, Eyowo Payments.

Compliant taxpayers post-notice escaped prosecution; defaulters risk penalties, interest, jail.

Pedro urged prompt filings and payments.


Kindly share this post
Continue Reading

Trending