E-Business
The Evolving Threat Landscape: Top Cybercrime Trends Organisations Should Take Note of in 2023
By Emmanuel Asika
The cyber threat landscape continued to evolve last year, with malevolent players joining forces more than ever before, exchanging access to networks and systems, sharing malware and sharpening their attack methods.
Such heightened collaboration, coupled with the low cost of malware – three-quarters of malware kits cost less than ₦7,000 – are further triggering cybercrime to be more accessible.
The implication being that more devices and end-users will be vulnerable to being under attack in 2023, and as cyber criminals intensify attempts to access enterprises – these systems, PCs and printers will be at the forefront.
These challenges, for cyber-security experts, will be intensified by the growing economic slump and uncertainties. As cybersecurity spending is set to increase by 13.2% in 2023, cost projections will be under critical observation, with emphasis on the most important cybersecurity demands.
With tough impending decisions, below are four cybersecurity trends that institutions must plan for in 2023:
- Increasing costs can prompt an inflow of cyber hustlers and money mules, powering the cybercrime economy and leaving users at risk
The increase in the cybercrime gig economy, with its swing to platform-based business models, has made cybercrime simpler, affordable, and more dynamic.
Cybercrime devices and mentoring services are readily available at low costs, luring cyber hustlers – adherents with little technical skill – to access needed information to make gains.
With an impending global downturn, easy access to cybercrime tools and skills could enhance the number of scam SMS messages and emails filling our inboxes.
Lured by the potential of quick money, there is a likelihood of seeing more recruits into money-muling schemes, unintentionally encouraging the cybercrime ecosystem as enablers of fraudulent transactions, money laundering, and perhaps ransoms payments.
The interrelated nature of the cybercrime gig economy means that threat actors can easily make money from email compromise attacks.
If they find a victim and succeed by compromising an enterprise device, they can market that access to bigger ransomware gangs. This gives structured groups of hackers more reach, hence feeding into the cybercrime ecosystem.
With increasing attacks against users, embedding security in all devices from the hardware will be significant to prevent, detect and recover from attacks.
Adopting a robust security culture is key for building resilience, however, only when combined with technology that decreases an organization’s attack interface. A whole group of threats can be eradicated without relying on detection by isolating risky activities like malicious emails.
Threat containment technologies in this case ensure that if a user opens a malicious link or attachment, the malware can’t infect any data. With this model, businesses reduce the propensity of malicious attacks and protect employee interests without compromising their workflows.
- Notorious hackers will invest in more attacks below the operating system.
Until recently, firmware attacks were only used by sophisticated threat groups and countries.
However, just last year, early signs revealed an increased interest and development of attacks below the operating system – from tools to hack BIOS passwords, to rootkits and trojans targeting device’s firmware. Today, we now see firmware rootkits advertised relatively cheaply on cybercrime marketplaces.
As one would expect, sophisticated threat actors are always looking to stay one step ahead in terms of their attack capabilities. Unfortunately, firmware security is frequently disregarded by organizations, giving room for adversaries to attack and exploit.
Access to the firmware level allows attackers to gain persistent control and hide below the operating system, making them very hard to detect – let alone remove and remediate.
As such, organizations and individuals must ensure they understand industry best practices and standards for device hardware and firmware security.
Additionally, organizations must further endeavour to understand and evaluate the latest technology readily available to protect, detect and recover from firmware attacks.
- Remote access equipment will be on the forefront for attacks
Session hijacking is anticipated. The year will witness a growth in popularity – where an attacker hijacks a remote access session to obtain an organisation’s sensitive data and systems.
The user is characteristically unsuspecting that anything malicious has happened and takes milliseconds to inject key sequences and issue commands that generate an alternative gateway for persistent access.
It works even if Privileged Access Management (PAM) systems employ Multi-Factor Authentication (MFA), such as smart cards.
When a malicious attack links to Operational Technology (OT) and Industrial Control Systems (ICS) running factories and industrial plants, there could also be a noticeable impact on operational readiness and safety – possibly cutting off access to energy or communication for entire areas.
The only way of preventing these kinds of attacks is breaking the attack chain and strong isolation technology, either through using a physically separate system, like a Privileged Access Workstation (PAW), or virtual separation, via hypervisor-based approaches.
- Neglect print security at your risk in 2023
Presently, print security is endangered by the constant tendency to be a neglected factor of the total cybersecurity environment and with more printers connected to corporate networks due to hybrid working, the risks keep increasing. Institutions need to structure security policies and processes for monitoring and protecting print gadgets from attacks, at home and in the workplace.
The challenge is the risk telemetry coming from end points, including printers, is growing by the day. Consequently, we will see institutions concentrate investments on solutions and services delivery that provide functional intelligence rather than merely delivering more security data.
Tackling increasing threats
This year, organisations must be intentional with their security approaches. Often, security glitches start at the endpoint, hence, by embedding protection in these devices, businesses can lessen the burden on their security unit.
Regardless of the threats institutions face in 2023, it is apparent that the tactics we deploy to protect devices and data has to change.
The key consideration here is strategic resource allocation, and the security teams need to recognise the specific areas of the business that are most susceptible to threats, and that would be most impacted in the event of a breach.
It is also vital to have a layered approach to security which will allow institutions to execute isolation, gain actionable intelligence, isolation and more, whilst helping to lessen their attack surface and maintain safety of key data.
Emmanuel Asika is Country Head for Nigeria, at HP
Fifty selected young unemployed Nigerians have completed a four-week intensive digital skills bootcamp under the Digital Literacy for All (DL4ALL) initiative, gaining practical training in Data Science, Artificial Intelligence (AI), and IT Essentials.
The programme, a collaborative effort between the National Information Technology Development Agency (NITDA) and Cisco, was hosted at NITDA’s South West Zonal Office in Victoria Island, Lagos.
Speaking on behalf of the Director General of NITDA, Kashifu Inuwa , the Head of the South West Zonal Office, Mrs. Chioma Okee-Agugwo, described the initiative as a vital component of Nigeria’s digital future. “This is not just a closing ceremony. It is the launchpad for new journeys—anchored in digital knowledge and powered by innovation,” she remarked.
According to the Director General, the initiative is rooted in NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0) and reflects key focus areas including Digital Literacy, Emerging Technologies, and Youth Empowerment. It also aligns with President Bola Ahmed Tinubu’s Renewed Hope Agenda, which seeks to accelerate economic diversification through digitisation, innovation, and skills development.
Inuwa noted that the DL4ALL initiative forms part of Nigeria’s broader commitment to digital inclusion—ensuring that no one is left behind in the evolving digital economy. It also supports the ambitious goal of achieving 70% digital literacy by 2027, championed by the Honourable Minister of Communications, Innovation and Digital Economy, Dr. Bosun Tijani. This national vision aims to equip millions of Nigerians with the skills required to thrive in a tech-driven world.
He further emphasized the importance of empowering youth with globally relevant skills. “They are no longer just consumers of technology. They are creators, innovators, and future employers,” he said.
The NITDA boss explained that throughout the bootcamp, participants engaged in hands-on learning experiences designed to build both technical proficiency and digital leadership capabilities.
“This is only the beginning,” he stated. “Through our zonal strategy, we are bringing innovation closer to local communities. This is how we democratise access and unlock Nigeria’s full digital potential.”
Inuwa expressed appreciation to Cisco for delivering high-impact training and called on stakeholders to continue investing in partnerships, people, and platforms that drive digital inclusion.
He asserted that the newly certified participants are now equipped to contribute meaningfully to Nigeria’s digital economy—armed with the skills to build solutions, secure infrastructure, and launch tech ventures that solve real-world problems.
At the end of the bootcamp, participants demonstrated their knowledge through impressive presentations that showcased the integration of skills acquired across Data Science, AI, and IT Essentials. Many spoke passionately about how the programme had expanded their technical competence and sparked a drive to create job opportunities—not only for themselves but also for others—as entrepreneurs and digital solution providers in their communities.
Coinbase forecast a hit of between $180m and $400m from a cyberattack that breached account data of a “small subset” of its customers, the crypto exchange said in a regulatory filing on Thursday.
The company received an anonymous email on May 11, claiming to have information about certain customer accounts as well as internal documents.
While some data — including names, addresses and emails — was stolen, the hackers did not get access to login credentials or passwords, Coinbase said.
Still, it will reimburse customers who were tricked into sending funds to the attackers.
Hackers had paid multiple contractors and employees working in support roles outside the US to collect information.
The company has fired those involved, it said.
Separately, the New York Times reported that the US Securities and Exchange Commission (SEC) was investigating whether the company had misstated its user numbers.
Coinbase shares extended losses after the report and were last down 6.5%.
“This is a hold-over investigation from the prior administration about a metric we stopped reporting two-and-a-half years ago, which was fully disclosed to the public,” said Paul Grewal, Coinbase’s chief legal officer.
“While we strongly believe this investigation should not continue, we remain committed to working with the SEC to bring this matter to a close.”
The SEC declined to comment.
The latest developments come days before the company is set to join the benchmark S&P 500 index, casting a shadow over what was expected to be a landmark moment for the crypto industry.
Security remains a challenge for the crypto industry despite its growing mainstream acceptance.
In February, Bybit disclosed a hack in which about $1.5bn worth of digital tokens were stolen — widely described the biggest crypto heist ever.
“The cyberattack may push the industry to adopt stricter employee vetting and introduce some reputational risks,” said Bo Pei, an analyst at US Tiger Securities.
Funds stolen by hacking crypto platforms amounted to $2.2bn in 2024, according to a report from Chainalysis, a US-based blockchain analysis firm.
“As our nascent industry grows rapidly, it draws the eye of bad actors, who are becoming increasingly sophisticated in the scope of their attacks,” said Nick Jones, founder of crypto firm Zumo.
Coinbase has refused to pay a ransom of $20m demanded by the attackers and is working with law enforcement agencies. Instead it has established a $20m reward for information on the hackers.
The company is also opening a new support hub in the US and taking other measures to prevent such cyberattacks, it said.
The Nigeria Internet Registration Association (NiRA) presents its report on .ng domain name registration and renewal statistics for the first quarter of 2025, highlighting the continued expansion of Nigeria’s digital footprint. The data underscores a consistent and significant adoption of the nation’s Country Code Top-Level Domain (ccTLD), reinforcing its pivotal role in the burgeoning Nigerian digital economy.
During the period spanning January to March 2025, a total of 40,791 .ng domain names were recorded. This figure comprises 22,236 new registrations and 18,555 renewals, indicating a healthy balance between the acquisition of new digital identities and the sustained commitment of existing domain name holders to their online presence.
Analysis of the registration trends within the quarter reveals a notable upward trajectory, with a 13.92% increase in domain name registrations observed between February and March 2025.
This growth signifies an increasing recognition of the importance of a localized online identity by a diverse range of stakeholders, including individuals, startups, Small and Medium-sized Enterprises (SMEs), and larger organizations.
Notably, the .com.ng extension continues to be the dominant choice, accounting for over 60% of both new registrations and renewals. This reaffirms its status as the preferred domain name extension for Nigerian businesses seeking to establish a credible and locally relevant online brand presence while maintaining global accessibility. The sustained popularity of .com.ng underscores its perceived value among Nigerian entrepreneurs and enterprises seeking to secure their digital real estate.
This upward trajectory isn’t happening by chance. The Nigeria Internet Registration Association (NiRA) has remained intentional in its drive for digital inclusion and domain adoption. Through public education, training via the .ng Academy, outreach campaigns, and partnerships with stakeholders across the tech ecosystem, NiRA has consistently advocated for the importance of owning a local domain. The current standing of .ng as the second most registered ccTLD in Africa reflects the efficacy of these efforts.
Digital adoption in Nigeria is no longer just about being online—it’s about owning your digital identity. And with a .ng domain, Nigerians are better positioned to assert that identity, connect with local and international audiences, and gain better control over their digital footprints.
As we look toward the rest of 2025, the Q1 results serve as a strong signal: more people are embracing the digital future, and the .ng domain is increasingly becoming their first step.
Creative Economy Ministry Secures $300M Investments Commitment
NITDA DG says its Community IT Centres Should be a Catalyst of Change
African Women Hit Hardest as Mobile Internet Gender Gap Persists
NITDA, CISCO Empower Youth with Digital Skills
Anambra State Government Launches SolutionLens to Drive Transparency and Citizen Engagement
NBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
MTN Appoints Egerton Idehen as Chief Broadband Officer
CBN Slams ₦250m Fine on Paystack Over Zap Wallet Operations
Nigeria Hits 1 Terabit Internet Traffic Milestone
MTN Nigeria Takes Broadband Services to the Next Level with FibreX Launch
General News3 days agoNITDA Advocates Strategic Partnership in Research to Unlock Nigeria’s Digital Potential
Telecom2 days ago₦800 Billion Infrastructure Plan Set to Boost MTN’s Network Quality Nationwide
Telecom3 days agoGSMA Urges Governments to Prioritise Affordable Spectrum Costs to Support Global Digital Growth
E-Business2 days agoNITDA, CISCO Empower Youth with Digital Skills
Telecom3 days agoTelcos Worry over Possible 5 Percent Tax Return
Telecom3 days agoSophos Launches MSP Elevate Program to Boost MSP Growth and Profitability
E-Financial3 days agoWhy and How Banks Fail in Nigeria by CIoD Chair
Telecom3 days agoGet Ready: Google Unveils 8 Game-Changing Android Updates