E-Business
The Evolving Threat Landscape: Top Cybercrime Trends Organisations Should Take Note of in 2023
By Emmanuel Asika
The cyber threat landscape continued to evolve last year, with malevolent players joining forces more than ever before, exchanging access to networks and systems, sharing malware and sharpening their attack methods.
Such heightened collaboration, coupled with the low cost of malware – three-quarters of malware kits cost less than ₦7,000 – are further triggering cybercrime to be more accessible.
The implication being that more devices and end-users will be vulnerable to being under attack in 2023, and as cyber criminals intensify attempts to access enterprises – these systems, PCs and printers will be at the forefront.
These challenges, for cyber-security experts, will be intensified by the growing economic slump and uncertainties. As cybersecurity spending is set to increase by 13.2% in 2023, cost projections will be under critical observation, with emphasis on the most important cybersecurity demands.
With tough impending decisions, below are four cybersecurity trends that institutions must plan for in 2023:
- Increasing costs can prompt an inflow of cyber hustlers and money mules, powering the cybercrime economy and leaving users at risk
The increase in the cybercrime gig economy, with its swing to platform-based business models, has made cybercrime simpler, affordable, and more dynamic.
Cybercrime devices and mentoring services are readily available at low costs, luring cyber hustlers – adherents with little technical skill – to access needed information to make gains.
With an impending global downturn, easy access to cybercrime tools and skills could enhance the number of scam SMS messages and emails filling our inboxes.
Lured by the potential of quick money, there is a likelihood of seeing more recruits into money-muling schemes, unintentionally encouraging the cybercrime ecosystem as enablers of fraudulent transactions, money laundering, and perhaps ransoms payments.
The interrelated nature of the cybercrime gig economy means that threat actors can easily make money from email compromise attacks.
If they find a victim and succeed by compromising an enterprise device, they can market that access to bigger ransomware gangs. This gives structured groups of hackers more reach, hence feeding into the cybercrime ecosystem.
With increasing attacks against users, embedding security in all devices from the hardware will be significant to prevent, detect and recover from attacks.
Adopting a robust security culture is key for building resilience, however, only when combined with technology that decreases an organization’s attack interface. A whole group of threats can be eradicated without relying on detection by isolating risky activities like malicious emails.
Threat containment technologies in this case ensure that if a user opens a malicious link or attachment, the malware can’t infect any data. With this model, businesses reduce the propensity of malicious attacks and protect employee interests without compromising their workflows.
- Notorious hackers will invest in more attacks below the operating system.
Until recently, firmware attacks were only used by sophisticated threat groups and countries.
However, just last year, early signs revealed an increased interest and development of attacks below the operating system – from tools to hack BIOS passwords, to rootkits and trojans targeting device’s firmware. Today, we now see firmware rootkits advertised relatively cheaply on cybercrime marketplaces.
As one would expect, sophisticated threat actors are always looking to stay one step ahead in terms of their attack capabilities. Unfortunately, firmware security is frequently disregarded by organizations, giving room for adversaries to attack and exploit.
Access to the firmware level allows attackers to gain persistent control and hide below the operating system, making them very hard to detect – let alone remove and remediate.
As such, organizations and individuals must ensure they understand industry best practices and standards for device hardware and firmware security.
Additionally, organizations must further endeavour to understand and evaluate the latest technology readily available to protect, detect and recover from firmware attacks.
- Remote access equipment will be on the forefront for attacks
Session hijacking is anticipated. The year will witness a growth in popularity – where an attacker hijacks a remote access session to obtain an organisation’s sensitive data and systems.
The user is characteristically unsuspecting that anything malicious has happened and takes milliseconds to inject key sequences and issue commands that generate an alternative gateway for persistent access.
It works even if Privileged Access Management (PAM) systems employ Multi-Factor Authentication (MFA), such as smart cards.
When a malicious attack links to Operational Technology (OT) and Industrial Control Systems (ICS) running factories and industrial plants, there could also be a noticeable impact on operational readiness and safety – possibly cutting off access to energy or communication for entire areas.
The only way of preventing these kinds of attacks is breaking the attack chain and strong isolation technology, either through using a physically separate system, like a Privileged Access Workstation (PAW), or virtual separation, via hypervisor-based approaches.
- Neglect print security at your risk in 2023
Presently, print security is endangered by the constant tendency to be a neglected factor of the total cybersecurity environment and with more printers connected to corporate networks due to hybrid working, the risks keep increasing. Institutions need to structure security policies and processes for monitoring and protecting print gadgets from attacks, at home and in the workplace.
The challenge is the risk telemetry coming from end points, including printers, is growing by the day. Consequently, we will see institutions concentrate investments on solutions and services delivery that provide functional intelligence rather than merely delivering more security data.
Tackling increasing threats
This year, organisations must be intentional with their security approaches. Often, security glitches start at the endpoint, hence, by embedding protection in these devices, businesses can lessen the burden on their security unit.
Regardless of the threats institutions face in 2023, it is apparent that the tactics we deploy to protect devices and data has to change.
The key consideration here is strategic resource allocation, and the security teams need to recognise the specific areas of the business that are most susceptible to threats, and that would be most impacted in the event of a breach.
It is also vital to have a layered approach to security which will allow institutions to execute isolation, gain actionable intelligence, isolation and more, whilst helping to lessen their attack surface and maintain safety of key data.
Emmanuel Asika is Country Head for Nigeria, at HP
Computer Professionals (Registration Council of Nigeria), also known as CPN has begun a nationwide crackdown on quackery and unlicensed practices in a bid to strengthen professional standards in the country’s information technology sector.
CPN has also vowed tougher action against cybercrime in the country.
These were the major decisions taken at its 2026 Information Technology Professionals’ Assembly and Annual General Meeting (AGM) on Friday
Essien Eyo, president and chairman of Council of CPN, speaking at a virtual press conference, said the council would continue to enforce strict compliance with professional regulations to safeguard the integrity of Nigeria’s computing ecosystem.
He warned that the council would not tolerate unlicensed practice in the sector, stressing that regulatory enforcement would be strengthened in line with its statutory mandate.
“The Act makes it mandatory for all persons and organisations seeking to engage in computing and professional services to be registered and licensed by the council.
“It is illegal to engage in computing and professional practice without satisfying the requirement of registration and possession of a valid licence,” Eyo said.
He added that the council was determined to rid the sector of quackery and ensure that only qualified professionals are allowed to operate.
“CPN is committed to ensuring high professional ethics and standards, and we will continue to intensify efforts to eliminate quackery, arbitrary practice and lack of standards in the IT sector,” he stated.
Eyo disclosed that the 2026 IT Professionals’ Assembly, scheduled for May 13 and 14 at the NAF Conference Centre, Kado, Abuja, would serve as a key platform to advance regulatory compliance, professional development and industry collaboration.
The event, now in its 20th edition, has the theme, “Digital Resilience and Inclusion for Smart Economy,” and aligns with Nigeria’s broader digital economy and Renewed Hope Agenda.
He explained that the theme reflects the urgent need to build a secure, inclusive and resilient digital ecosystem capable of withstanding modern technological disruptions.
“In an era defined by rapid technological change, cybersecurity threats, economic disruptions and evolving digital demands, resilience ensures that digital infrastructure and institutions can withstand shocks and sustain growth,” Eyo said.
“At the same time, inclusion guarantees that no segment of society is left behind in accessing digital opportunities.”
He said the assembly would also focus on emerging digital risks, ethical technology deployment, inclusive policy frameworks and strengthening collaboration among government, industry, academia and civil society.
Eyo further noted that the event would feature the induction of new members into the computing profession and would be delivered in a hybrid format to ensure wider participation.
“The 2026 IT Professionals’ Assembly is not just an event but a strategic platform for shaping Nigeria’s digital destiny,” he said.
He confirmed that the keynote address would be delivered by Bosun Tijani, minister of Communications, Innovation and Digital Economy.
Also speaking, Aliu Abdullahi, vice president of Council, said the establishment of CPN was a Federal Government response to the need for proper regulation of Nigeria’s growing IT sector.
He said the council’s mandate includes setting professional standards, accrediting academic programmes, conducting examinations, regulating practice, enforcing ethics and maintaining the national register of computing professionals.
Abdullahi reiterated that all individuals and organisations engaged in IT training, computing services and related activities must be duly registered and licensed by the council.
He urged media organisations to support public awareness of the council’s activities, especially the forthcoming assembly, which he described as critical to strengthening Nigeria’s digital governance and professional integrity.
Surfshark, a Netherlands-based cybersecurity firm, has reported that Nigeria recorded about 24.1 million compromised user accounts since 2004, making it the third most affected country in Sub-Saharan Africa.
The report, which analysed global data breach trends for the first quarter of 2026, showed that Nigeria recorded 281,500 leaked accounts between January and March 2026, ranking the country as the 34th most breached nation globally during the period.
Globally, the report revealed that 210.3 million accounts were breached in the first quarter of 2026, representing a sharp increase compared to previous periods.
The United States accounted for 29 per cent of all reported breaches worldwide, followed by France, India, Brazil and the United Kingdom.
According to the report, cyber threats targeting Nigerian users have continued to intensify over the years, exposing millions of individuals to risks such as identity theft, account hijacking, extortion and financial fraud.
Surfshark disclosed that about 7.5 million unique email addresses linked to Nigerian users have been exposed since 2004, while approximately 13 million passwords were leaked alongside compromised accounts.
The report noted that more than half of breached Nigerian users remain vulnerable to cyber-related crimes.
“Statistically, 10 out of 100 Nigerian people have been affected by data breaches,” the report stated.
Further analysis showed that leaked data linked to Nigerian users included highly sensitive information such as Social Security-related records, payment card details, residential addresses, and personal contact information.
According to the report, about 3,900 Social Security-related records and 1,600 payment card details were exposed, alongside 1.9 million phone numbers and more than 925,000 residential addresses.
The cybersecurity firm warned that the growing scale of data exposure reflects increasing vulnerabilities in the global digital ecosystem as businesses accelerate the adoption of artificial intelligence technologies.
Commenting on the trend, Tomas Stamulis, chief security officer, Surfshark, said the rapid integration of AI systems by companies has significantly expanded the volume of user data being collected and stored.
According to him, businesses are increasingly relying on AI-driven tools for automation, analytics and operational efficiency, leading to the accumulation of larger datasets that could become attractive targets for cybercriminals.
The report cited industry statistics indicating that 20.2 per cent of companies used AI technologies in 2025, up from 8.7 per cent in 2023.
“These AI-driven systems collect and log more detailed user information for automation, analytics, and model improvement,” Stamulis said.
He added that while artificial intelligence improves productivity and operational efficiency, it also increases the number of systems organisations must secure, thereby creating additional opportunities for cyberattacks and data leaks.
Stamulis further warned that compromised personal information often retains value for cybercriminals long after passwords or email credentials have been changed.
According to him, hackers frequently combine old and newly leaked information into so-called “combo lists,” which are repeatedly traded or deployed for fraudulent activities and identity theft schemes.
He advised internet users to minimise the amount of sensitive personal information shared online, use alternative email identities or masking services where possible, and provide confidential information only when necessary.
The report also showed that global breached accounts in the first quarter of 2026 tripled compared to the corresponding period of 2025 and rose by 22 per cent relative to the fourth quarter of 2025, underscoring the growing sophistication and frequency of cyberattacks worldwide.
National Information Technology Development Agency (NITDA), has raised alarm over a new artificial intelligence-powered malware known as “DeepLoad,” warning that the cyber threat is actively targeting Nigerian government agencies, financial institutions, businesses and individuals.
The agency disclosed this in a critical advisory issued through its Computer Emergency Readiness and Response Team (CERRT.NG) and shared via its official X account.
The warning comes amid a growing wave of cyber-attacks targeting Nigerian organisations, including private institutions such as banks and government agencies like the Corporate Affairs Commission (CAC).
According to NITDA, DeepLoad is an AI-enhanced malware strain designed to infiltrate systems, steal sensitive information and evade conventional antivirus detection systems.
“The malware is distributed through a social engineering technique involving fake website error,” the advisory stated.
NITDA explained that the malware spreads through deceptive website prompts that trick users into executing malicious commands on their computers.
“Once executed, DeepLoad silently installs itself, harvests stored credentials and sensitive data from major browsers, and leverages artificial intelligence to evade antivirus detection,” the agency said.
The agency further warned that one of the most dangerous features of the malware is its ability to remain active even after attempted removal.
“Critically, the malware incorporates a hidden WMI-based persistence mechanism capable of reactivating the infection up to three days after apparent removal,” it stated.
NITDA stressed that the severity of the threat requires immediate action from both organisations and individuals across the country.
“Given its severity and confirmed active targeting of Nigerian entities, all organizations and individuals must implement the protective measures outlined in this advisory immediately,” the agency added.
The agency warned that individuals, government institutions, businesses, large organisations and small enterprises are all vulnerable to the rapidly evolving cyber threat posed by DeepLoad.
According to NITDA, a successful DeepLoad infection could grant cybercriminals unauthorised access to bank accounts, mobile money services and payment cards, while also enabling the theft of passwords, documents and sensitive personal information stored on web browsers.
The agency warned that the stolen information could be exploited for identity fraud, allowing criminals to impersonate victims for financial gain.
For organisations, NITDA said infections could trigger operational disruptions requiring complete system isolation and remediation procedures. It added that attacks on government systems could compromise classified networks and pose broader national security risks.
To prevent infections, NITDA advised Nigerians never to paste commands from websites into their computers, noting that legitimate software providers do not request such actions.
The agency also cautioned users against opening suspicious files such as “Chrome Setup” or “Firefox Installer” from USB drives and advised that all external storage devices be scanned with antivirus software before use.
NITDA further recommended enabling two-factor authentication on important accounts and avoiding the storage of banking passwords directly on web browsers.
For organisations, the agency urged companies to immediately sensitise staff about the DeepLoad threat, enable PowerShell Script Block Logging across Windows systems and review browser extensions for unauthorised installations.
The advisory also recommended blocking malicious domains, including holiday-updateservice[.]com, forest-entity[.]cc and hell1-kitty[.]cc, at firewall and DNS levels.
Additionally, organisations were advised to check for hidden WMI Event Subscriptions that could allow the malware to survive standard cleanup procedures.
NITDA said institutions that suspect infections should immediately disconnect affected systems from the internet, change all passwords from clean devices, isolate compromised systems, activate incident response teams and report incidents to the agency within 72 hours as required by law.
The latest warning has added to growing concerns over cyber attacks targeting Nigeria’s financial and digital infrastructure in recent months.
In April, the Nigeria Data Protection Commission (NDPC) warned about coordinated cyber threats targeting Nigeria’s financial systems and critical digital infrastructure, urging organisations to strengthen their data protection architecture.
The warning also followed the commission’s announcement of an investigation into an alleged data breach involving Remita Payment Services, Sterling Bank and other entities.
Similarly, the Corporate Affairs Commission (CAC) temporarily shut down its website between April 17 and April 20, 2026, following reports that about 25 million documents may have been exfiltrated during a suspected cyber attack.
Africa Prudential Launches Sabivest to Boost Digital Investment Access
Interswitch Inducts 3rd Interns into Its Developer Academy
Transcorp Excites Shareholders with ₦20.3 Billion Dividend @20th AGM
PIN Records 3.07bn Media Reach, Expands Digital Rights Impact Across Africa in 2025
PAFON 3.0: Agency Banking Key to Reaching Millions of Unbanked Nigerians – AMMBAN
Kaspersky Discovers Vulnerability in Qualcomm Snapdragon Chips that can Lead to Data Loss & Device Compromise
MTN Suspends Data, Airtime Borrowing Service over New FCCPC Lending Rules
Bank Customers to Pay N1,500 for ATM Card Issuance, Replacement – CBN
FCCPC Licenses 5 Firms for Airtime, Data Lending as Telcos Step Aside
ATM Card Fees Jump to ₦1,500 as CBN Scraps Maintenance Charges
Telecom2 days agoAirtel Africa Profits Hit $813m on Strong Nigerian Operations Performance
E-Financial2 days agoIMF Fears AI-Powered Cyberattack Could Spark Global Financial Crisis
Telecom2 days agoUnity Bank Disburses N500m Loan Facility to Support Small Traders
E-Financial2 days agoMasterCard, BMONI Partner to Improve Digital Payments
Telecom2 days agoATCON Seeks Stiffer Penalities to Deter Infrastructure Attacks, Vandalism
E-Business2 days agoCPN Begins Crackdown on Quack IT Professionals, Vows Tougher Action against Cybercrime
E-Financial2 days agoFidelity Bank Provides Critical Funding Support to Abuja Special Needs Orphanage
General News2 days agoFG Says It May Reject World Bank Loans over Delays