E-Business
Ransomware Hit 71Per Cent of Nigerian Organizations – Sophos’ Annual State of Ransomware Survey Reveals
Sophos, a global leader in next-generation cybersecurity, has released its annual international survey and review of real-world ransomware experiences in the State of Ransomware 2022.
Chester Wisniewski, principal research scientist at Sophos.
The report shows that 71% of Nigerian organizations surveyed were hit with ransomware in 2021, up from 22% in 2020. Forty-four percent of the organizations that had data encrypted paid the ransom to get their data back, even if they had other means of data recovery, such as backups.
The report summarizes the impact of ransomware on 5,600 mid-sized organizations in 31 countries across Europe, the Americas, Asia-Pacific and Central Asia, the Middle East, and Africa.
“The survey shows that, globally, the proportion of victims paying the ransom continues to increase, even when they may have other options available,” said Chester Wisniewski, principal research scientist at Sophos.
“There could be several reasons for this, including incomplete backups or the desire to prevent stolen data from appearing on a public leak site. In the aftermath of a ransomware attack there is often intense pressure to get back up and running as soon as possible.
“Restoring encrypted data using backups can be a difficult and time-consuming process, so it can be tempting to think that paying a ransom for a decryption key is a faster option.
“It’s also an option fraught with risk. Organizations don’t know what the attackers might have done, such as adding backdoors, copying passwords and more. If organizations don’t thoroughly clean up the recovered data, they’ll end up with all that potentially toxic material in their network and potentially exposed to a repeat attack.”
The main findings of the State of Ransomware 2022 global survey from the Nigerian respondents, which covers ransomware incidents experienced during 2021, as well as related cyber insurance issues, include:
· More victims are paying the ransom – In 2021, 44% of organizations that had data encrypted in a ransomware attack paid the ransom
· The impact of a ransomware attack can be immense – The average cost to recover from the most recent ransomware attack in 2021 was US$3.43 million. It took on average one month to recover from the damage and disruption. Ninety-seven percent of organizations said the attack had impacted their ability to operate, and 96% of the victims said they had lost business and/or revenue because of the attack
· Many organizations rely on cyber insurance to help them recover from a ransomware attack – 81% of mid-sized organizations had cyber insurance that covers them in the event of a ransomware attack – and, in 97% of incidents, the insurer paid some or all the costs incurred
· Ninety-one percent of those with cyber insurance said that their experience of getting it has changed over the last 12 months, with higher demands for cybersecurity measures, more complex or expensive policies and fewer organizations offering insurance protection
“The findings suggest we may have reached a peak in the evolutionary journey of ransomware, where attackers’ greed for ever higher ransom payments is colliding head on with a hardening of the cyber insurance market as insurers increasingly seek to reduce their ransomware risk and exposure,” said Wisniewski.
“In recent years, it has become increasingly easy for cybercriminals to deploy ransomware, with almost everything available as-a-service. Second, many cyber insurance providers have covered a wide range of ransomware recovery costs, including the ransom, likely contributing to ever higher ransom demands.
“However, the results indicate that cyber insurance is getting tougher and in the future ransomware victims may become less willing or less able to pay sky high ransoms. Sadly, this is unlikely to reduce the overall risk of a ransomware attack.
“Ransomware attacks are not as resource intensive as some other, more hand-crafted cyberattacks, so any return is a return worth grabbing and cybercriminals will continue to go after the low hanging fruit.”
Sophos recommends the following best practices to help defend against ransomware and related cyberattacks
1. Install and maintain high-quality defenses across all points in the organization’s environment. Review security controls regularly and make sure they continue to meet the organization’s needs
2. Proactively hunt for threats to identify and stop adversaries before they can execute their attack – if the team lacks the time or skills to do this in house, outsource to a Managed Detection and Response (MDR) specialist
3. Harden the IT environment by searching for and closing key security gaps: unpatched devices, unprotected machines, open RDP ports, etc. Extended Detection and Response (XDR) solutions are ideal for this purpose
4. Prepare for the worst. Know what to do if a cyber incident occurs and keep the plan updated
5. Make backups, and practice restoring from them so that the organization can get back up and running as soon as possible, with minimum disruption
Kaspersky, a global cybersecurity company, and the Small and Medium Enterprises Development Agency of Nigeria (SMEDAN) have signed a memorandum of understanding (MoU) to assist small and medium businesses in the country to become more cyber-aware and less vulnerable to developing cyber threats.
The MoU reflects a shared view that SMEs, being the backbone of economy, require strong cybersecurity measures. Kaspersky and SMEDAN will work together on information sharing, training programmes, and other practical steps to raise awareness of digital threats and cybersecurity measures.
“Small and medium business owners are juggling a dozen things – accounting, promotion, legal issues. They are not cybersecurity experts. But they are being targeted by cybercriminals through malware, phishing, and online schemes using social engineering tactics that make them look realistic.
“Our aim is to provide these organisations with some best practice tools and inform about measures that will help them stay safer online,” says Chris Norton, General Manager for Sub-Saharan Africa at Kaspersky.
The cooperation will feed into SMEDAN’s wider SME development efforts, with Kaspersky contributing cybersecurity knowledge and joining forces on awareness campaigns. The idea is to bring cybersecurity-focused guidance into existing business support channels, and to do it in a way that actually makes sense to entrepreneurs who may not have technical teams behind them.
Charles Odii, DG/CEO of SMEDAN, comments: “Since the COVID-19 pandemic, digital adoption among business owners has accelerated significantly. Many now operate WhatsApp shops, use online banking, and send invoices via email, which has increased their exposure to cyber risks.
Together with Kaspersky, we intend to strengthen cybersecurity awareness and practices across Nigeria, helping SMEs protect their businesses as they embrace the digital economy.”
SMEDAN has long been a government agency that has consistently shown up for small business owners in Nigeria. Its work cuts across industries, regions, and stages of growth from traders and artisans to early-stage tech startups trying to get formalised. This partnership gives it another tool to help those businesses operate more securely in a digital world. For Kaspersky, the collaboration is part of a wider push across the continent to support under-resourced sectors that are quietly being targeted online.
Kashifu Inuwa, CCIE, the Director General of the National Information Technology Development Agency (NITDA), has emphasised that integrating intelligence, security, and sustainability is critical to driving Nigeria’s digital transformation and global competitiveness.
Inuwa made the remarks on Tuesday in Kano while delivering a goodwill message at the opening of the 19th International Conference (CONNOVATE 2025) of the Nigerian Computer Society (NCS), themed “Intelligent, Secure, and Sustainable Innovations for a Connected World.”
Represented by Engr. Salisu Kaka, Director of E-Government and Digital Economy Development, Inuwa said the three elements were now indispensable drivers of national progress. He highlighted the need for their convergence to unlock new opportunities in Nigeria’s technology sector, citing Estonia’s X-Road platform — which enables 99% of government services online — as a global model.
“In Nigeria, trust is the ultimate currency in our high-stakes digital environment, where scams and cybercrime are prevalent. Security builds and protects this trust,” Abdullahi said.
He stressed that while security provides the foundation, intelligence builds the structure, pointing to Artificial Intelligence (AI), Machine Learning (ML), and data analytics as tools for addressing Nigeria’s complex challenges. Warning that “innovation without security is unsustainable,” he likened it to “a high-performance race car without brakes.”
The DG urged the next wave of Nigerian startups to go beyond digitising existing processes to creating new value, citing AI-powered wealth management and ML-driven remote diagnostics as examples.
He further highlighted the various Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) initiatives supporting this vision, including the National Centre for Artificial Intelligence and Robotics (NCAIR), the Computer Emergency Readiness and Response Team (CERRT), the Nigeria Data Protection Act (NDPA) 2023, the national digital identity programme, interoperable payments, and human capital initiatives such as the 3 Million Technical Talent (3MTT) and Digital Literacy for All (DL4ALL) programmes.
Inuwa cited example with International Federation for Information Processing (IFIP) President, Antony Wong, that called for stronger protection and strategic use of data in the Global South to safeguard indigenous knowledge. He stressed the importance of legal clarity on data ownership as Nigeria’s cultural heritage in medicine, ecology, and art is digitised and incorporated into AI systems. Wong praised Nigeria’s role in the recent World Intellectual Property Organization (WIPO) treaty protecting genetic resources and traditional knowledge.
Delivering his welcome address, the NCS President, Dr. Muhammad Sirajo, said the conference would serve as a platform for IT professionals to address critical issues, including intelligent systems, fintech, sustainable energy, and innovations in agriculture, health, education, and national planning.
“This conference will provide an interdisciplinary platform for researchers, practitioners, and educators to present and discuss recent innovations, trends, and solutions for improving technological systems,” Sirajo said.
The week-long event includes plenary sessions, a doctoral consortium, a youth and entrepreneurship forum, the Fellows Forum, the Annual General Meeting, an IT quiz competition for students, and an induction ceremony for new members. It will conclude with the election of new national executives, a dinner, and an awards night honouring contributions to the ICT sector.
The African Development Bank (AfDB) is betting big on Artificial Intelligence (AI) as a catalyst for delivering Africa’s ambitious Agenda 2063.
With hands-on training in tools like ChatGPT and Google Gemini, the Bank believes the results could redefine how the continent plans, measures, and delivers its development goals.
Through its Joint Secretariat Support Office, the AfDB has provided technical and financial support to the 5th annual training workshop for African Union member states, focusing on the use of AI to track and implement the second ten-year plan (2024–2033) of Agenda 2063.
The five-day workshop, held in Lusaka, Zambia, was co-organised by the African Union Commission and the African Capacity Building Foundation.
Participants from across the continent rolled up their sleeves for hands-on training with emerging AI platforms like Ailyse, Google AI Studio, and Perplexity.
The goal of Africa’s multilateral development finance institution is to turn complex development data into actionable insights that can drive smarter decisions, faster interventions, and more accountable governance.
AbibuTamu, lead programme co-ordinator at the AfDB, said AI was now an indispensable tool for Africa’s future.
“These tools are not only revolutionizing how data is collected, analysed, and reported, they are also enabling more targeted policy interventions and efficient resource allocation,” Tamu told delegates.
Agenda 2063, dubbed “The Africa We Want,” is the African Union’s 50-year blueprint for inclusive growth and sustainable development. The second 10-year plan prioritises industrialisation, digital transformation, and sustainable livelihoods.
With AI now in the mix, African policymakers can track progress in real-time, spot bottlenecks before they choke projects, and reallocate resources where they are needed most.
The AfDB’s backing underscores a broader strategy of boosting both human and institutional capacity that propels African states to harness the digital revolution.
Beyond technical skills, the Lusaka workshop doubled as a peer-learning platform, with countries sharing real-world success stories on integrating AI into national planning and reporting.
“If Agenda 2063 is Africa’s long-term roadmap, this AI training is about upgrading the continent’s GPS that ensures leaders not only know the destination, but also have the intelligence to navigate every twist and turn on the way,” said Tamu.
Kaspersky, SMEDAN to Support SMEs in Nigeria with Cybersecurity Knowledge
NGF Launches Digital Platform to Bridge $100bn Infrastructure Gap
TD Africa Secures AI ISO Certifications
Data Is Life: Why MTN Wants You to Get Smarter with Your Data
Paradigm Initiative Equips Prosecutors for the Digital Age of Crime
Telecom3 days agoNCC Claims to Have Eliminated Unregistered SIMs from Telecoms Networks
Telecom3 days agoAliyu Aboki Applauds Broadband Mapping as About Expanding Opportunity in Africa
Telecom2 days agoFG Scraps 5 Percent Telecom Excise Duty Under New Tax Law
E-Financial3 days agoUBA Secures N5Bn BoI Fund to Boost Women Entrepreneurs, Others
Telecom3 days agoMTN Group Restructures Executive Team, Appoints Toriola VP for Francophone Africa
- News3 days ago
Telcos See Biggest Growth Post-COVID – ALTON
General News3 days agoVirtual Reality in Healthcare: Nigeria’s Untapped Opportunity for Training, Patient Care, and Medical Innovation
News3 days agoNITDA, Bauchi State Partner on Digital Literacy and Skills Framework