E-Business
10 Cyber Security Trends to Watch in 2019
Biometric hacking, an increase in phishing attacks and sophisticated use of artificial intelligence (AI) are among the top cyber security threats to be expected in 2019, as attackers stop at nothing to steal identities and evade detection through new techniques.
- Attacks through theft of biometric data
While several major leaks of biometric data have already occurred globally, the Middle East and Africa regions could see the first attacks in the theft and use of biometric data in 2019, according to Kaspersky Lab.
“As more biometric systems for user identification and authentication are being implemented by various financial institutions in META (Middle East, Turkey and Africa), 2019 will see criminals exposing vulnerabilities in passcodes, touch ID sensors and facial recognition,” says Fabio Assolini, senior security researcher at Kaspersky Lab.
“While many financial organisations consider these emerging biometric-based solutions to improve security over current authentication methods, biometric data will increasingly be used to steal sensitive information.”
- AI and machine learning make attacks harder to detect
Manuel Corregedor, COO at Telspace Systems, says 2019 will see more advanced exploitation of AI to carry out and conceal new exploits.
“I believe we will see an increase in attackers utilising AI and machine learning as a means to make their attacks more difficult to detect or prevent,” says Corregedor.
However, AI will also change the way the industry deals with threats.
Brian Pinnock, cyber security specialist at Mimecast, says AI and machine learning will play a more prominent role as the velocity and variety of attacks makes conventional approaches – such as blacklists – outdated and ill-equipped to deal with modern cyber threats.
“Organisations will realise the importance of threat intelligence and will focus on the need for an ‘intelligence function’ to identify threats,” says Pinnock.
- Phishing scams to soar
As e-mail attacks grow more frequent and complex, more organisations will be left scrambling for new ways to reduce risk and better detect and remediate threats in 2019.
Pinnock says throughout 2019, the most insidious development won’t be new attack types, but, rather, improved execution of existing attack types, especially those delivered via e-mail.
“Phishing techniques like the use of homoglyphs, elongated URLs, legitimate certifications (green lock), and credetial-harvesting sites will increase. Flawless phishes will continue to prey on the gap in human firewalls, pivoting internally around organisations and intensifying efforts to better educate all staff.”
Dr Jabu Mtsweni, research group leader for cyber defence at the Council for Industrial and Scientific Research (CSIR), points out that phishing scams are still quite popular as cyber security awareness remains low.
“Denial-of-service attacks on government Web sites were also popular in 2018. This includes injection of malware on government Web sites that remain undetected. In 2019, malicious e-mail and links will continue to be used by criminals to get access to organisations’ networks.”
- Fake videos bring a new era of fake news
UK-based innovation foundation Nesta forecasts that 2019 will see a new level of malicious posts on social media as fake videos set the next stage in fake news.
Lifelike computer-generated graphics – appearing to show video footage of events that never really happened – will be used to mislead the public.
“We predict that within the next 12 months, the world will see the release of highly authentic-looking malicious fake videos, which could cause substantial damage to diplomatic relations between countries,” says Nesta. “Deepfakes, a new AI-based technology that makes it possible to create fake videos of individuals nearly indistinguishable from the real thing, will make this possible.”
The innovation foundation believes that Deepfakes have the potential to spark a geo-political incident if a politician or celebrity is maliciously impersonated.
- Improved execution of existing attack types
In 2018, cyber attacks and data breaches continued to increase in both frequency and intensity, and organisations can expect more of the same in 2019, according to experts.
Corregedor points out that the biggest cyber security event of 2018 is probably just the sheer number of data breaches that have occurred across industry sectors, some utilising advanced attacks, others as a result of mistakes made by the affected organisations.
Over 4.5 billion data records were compromised worldwide in the first half of 2018, according to Gemalto’s latest Breach Level Index.
Pinnock points out that better social engineering, increases in credential stuffing attacks, and more complicated malware with multiple stages and different form factors for transmission will make threats incredibly tricky to detect in 2019.
“With global cyber crime organisations growing in maturity and sophistication, many are now acquiring capabilities that were once the sole reserve of nation states,” notes Pinnock
“We’re likely to see these cyber criminals use stolen credentials from the past few years’ data breaches to compromise the security of even the most secure organisations. Even companies with good cyber protection have little protection against the reuse of passwords that have been collected in other breaches.”
- Slight decrease in crypto currency attacks
According to Kaspersky Lab, 2018 saw a rise in the malicious use of crypto currency miners, with virus attacks and malicious software against crypto miners growing almost fourfold.
Kaspersky predicts that crypto currencies as a means of payment will decline further in 2019, and this trend is expected to lead to a slight decline in crypto currency threats.
“In the face of huge commissions, slow transfers, a large price for integration, and, most importantly, a small number of customers, the use of crypto currency as a method of payment has declined steadily from 2017 and will continue to decline in 2019.”
However, those crypto currency threats that do occur will be focused on mining malware, with the intervention of new players and the continuation of the use of ransomware.
“In 2018, the META region became more appealing to cyber criminals, with financial and malicious crypto mining attacks taking centre stage,” notes Assolini.
“Illegal mining of crypto currencies increased dramatically to overtake the main threat of the last few years – ransomware. We believe the reason for this is that mining is silent and causes less impact that ransomware, making it less noticeable.”
- Mobile, in-the-app malware
While malware that runs on the Windows operating system vastly outnumbers malware for any other platform, users of mobile devices are increasingly subject to malicious activity that pushes malware apps to their phones, tablets, or other devices running Android and iOS, according to computer network security company Sophos’ 2019 Threat Report.
For some time, malicious versions of popular apps were predominantly found on third-party app stores. These can be sketchy places, hosting pirated and/or trojaned versions of legitimate apps, notes the report.
Unusual malicious campaigns affecting the Android platform – phishing-in-the-app – can be expected in 2019, warns Sophos.
“In 2018, we discovered one way that criminals can bypass the Play Market’s source code checks was by not including anything malicious in the app itself, but rather by making an app that, in essence, is a browser window to a phishing site. The apps, in this case, were designed in tandem with the phishing site so the user had a seamless experience,” notes the report.
- 5G deployments to fuel threats
A number of 5G network infrastructure deployments kicked off this year, and 2019 is expected to be a year of accelerating 5G activity. While it will take time for 5G networks and 5G-capable phones and other devices to become broadly deployed, experts predict growth will occur rapidly.
According to Symantec’s Cyber Security Predictions: 2019 and Beyond, growing 5G deployments and adoption will expand the cyber-attacks surface area.
“As a stepping stone to broad deployment of 5G cellular networks, some carriers are offering fixed 5G mobile hotspots and 5G-equipped routers for homes. Given the peak data rate of 5G networks is 10 Gbps, the shift to 5G will catalyse new operational models, new architectures, and, consequently, new vulnerabilities.
“Over time, more 5G IoT devices will connect directly to the 5G network rather than via a WiFi router. This trend will make those devices more vulnerable to direct attack.”
- IIoT attacks not slowing down
Industrial IoT (IIoT) attacks through cloud infrastructure and over-reliance on AI in cyber security systems are two critical risks for enterprises in 2019, according to Forcepoint’s 2019 Cyber security Predictions Report.
“In 2019, attackers will break into industrial IoT devices by attacking the underlying cloud infrastructure. This target is more desirable for an attacker – access to the underlying systems of these multi-tenanted, multi-customer environments represents a much bigger payday.”
Three elements expected to play a significant role in the increase of IIoT attacks, according to the report, are: increasing network connectivity to edge computing; the difficulty in securing devices as more compute moves out to the edge; and the exponential number of devices connecting to the cloud for updates and maintenance.
- The rise of SaaS
Gilad Peleg, CEO of cyber security firm SecBI, predicts that in 2019, the model of enterprise software deployed on-premises will gradually disappear as it’s replaced by Software-as-a-Service (SaaS).
Many of the resources once in the hands of corporates, like the database, e-mail server, ERP, CRM and others, will all move to the cloud, leaving enterprises vulnerable, he observes.
“SaaS’ greatest advantage is also its greatest weakness. With SaaS, you need much less IT. This is a benefit at first glance, but upon inspection, it becomes a problem – you don’t control the access, or the data. Therefore, you don’t know you were hacked, nor do you have the tools to know,” notes Peleg.
“The security implications here are that organisations will cease to have visibility into the perimeter and all the perimeter’s defences. As enterprises acknowledge, they are left blind by this change, and will thus need new visibility solutions.”
An Interpol-coordinated operation has led to the arrest of 1 209 suspected cyber criminals that targeted nearly 88 000 victims. Dubbed Operation Serengeti 2.0, the crackdown recovered $97.4 million and dismantled 11 432 malicious networks used for cyber crime, says the law enforcement organisation.
The operation was set up to combat cyber-crime across the African continent, focusing on several criminal activities targeting organisations and individuals in the region.
The participating countries were Angola, Benin, Cameroon, Chad, Côte D’Ivoire, Democratic Republic of Congo, Gabon, Ghana, Kenya, Mauritius, Nigeria, Rwanda, Senegal, South Africa, Seychelles, Tanzania, the UK, Zambia and Zimbabwe.
Run between June and August, the operation brought together investigators from the 18 African countries and the UK to tackle high-harm and high-impact cyber crimes, including ransomware, online scams and business e-mail compromise.
According to Interpol, private sector collaboration partners assisted with intelligence, guidance and training to help investigators act on intelligence and identify offenders effectively.
The intelligence was shared with participating countries ahead of the operation, providing critical information on specific threats, as well as suspicious IP addresses, domains and C2 servers.
Valdecy Urquiza, secretary-general of Interpol, comments: “Each Interpol-coordinated operation builds on the last, deepening cooperation, increasing information sharing and developing investigative skills across member countries.
“With more contributions and shared expertise, the results keep growing in scale and impact. This global network is stronger than ever, delivering real outcomes and safeguarding victims.”
The first edition of operation Serengeti was held from September to October 2024 and cracked down on cyber crimes such as ransomware operations, digital extortion and online scams.
The criminal activities caused nearly $193 million in damages and, as a result of an effort uniting nearly 20 participating countries, more than 1 000 suspected cyber criminals were arrested, at the time.
The outcomes of Serengeti 2.0 saw authorities dismantle 25 crypto-currency mining centres in Angola, where the suspects were illegally validating blockchain transactions to generate crypto-currency.
The crackdown also identified 45 illicit power stations that were confiscated, along with mining and IT equipment worth more than $37 million, which has now been earmarked by the government to support power distribution in vulnerable areas.
In Zambia, authorities dismantled a large-scale online investment fraud scheme, identifying 65 000 victims who lost an estimated total of $300 million.
“The scammers lured victims into investing in crypto-currency through extensive advertising campaigns promising high-yield returns. Victims were then instructed to download multiple apps to participate,” reads the statement.
According to Interpol, authorities arrested 15 individuals and seized key evidence, including domains, mobile numbers and bank accounts. Investigations are ongoing with efforts focused on tracking down overseas collaborators.
Also in Zambia, authorities identified a scam centre and, in joint operations with the Immigration Department in Lusaka, disrupted a suspected human trafficking network. They confiscated 372 forged passports from seven countries.
“Despite being one of the oldest-running internet frauds, inheritance scams continue to generate significant funds for criminal organisations.
“Officers in Côte d’Ivoire dismantled a transnational inheritance scam originating in Germany, arresting the primary suspect and seizing assets, including electronics, jewellery, cash, vehicles and documents. With victims tricked into paying fees to claim fake inheritances, the scam caused an estimated $1.6 million in losses.”
Operation Serengeti 2.0 was held under the umbrella of the African Joint Operation against Cyber Crime, funded by the UK’s Foreign, Commonwealth and Development Office.
The collaborating partners were Cyber Crime Atlas, Fortinet, Group-IB, Kaspersky, The Shadowserver Foundation, Team Cymru, Trend Micro, TRM Labs and Uppsala Security.
Nigeria Data Protection Commission (NDPC) has began a comprehensive investigation of companies in the various sectors of the economy in order to expose data breaches and mete out appropriate sanctions.
The NDPC said companies in the insurance, banking, hospitality, pension, gaming and insurance brokers amongst others would be probed to determine their compliance with the NDP Act 2023..
The compliance notice, the commission said, forms part of a sector-by-sector investigation to enforce adherence to the law, which came into effect last year to safeguard citizens’ rights and strengthen Nigeria’s participation in the global digital economy.
“The Nigeria Data Protection Commission, in furtherance of its mandate under the Nigeria Data Protection Act, 2023, has commenced a sector-by-sector investigation of organisations suspected of non-compliance with the provisions of the Act,” the commission said in a statement on Sunday.
The statement, signed by Babatunde Bamigboye, head of Legal, Enforcement and Regulations at the NDPC, explained that the notice was issued pursuant to sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the Act.
According to the statement, the list of affected organisations would be published in national newspapers on Monday, August 25, 2025.
“These organisations are required to, within 21 days of issuance, provide the following: evidence of filing NDP Act Compliance Audit Returns for 2024, evidence of designation or appointment of a Data Protection Officer, summary of technical and organisational measures for data protection within the organisation, and evidence of registration as a Data Controller or Processor of Major Importance,” the statement continued.
The commission warned that any organisation that failed to comply with the notice risked facing serious regulatory sanctions.
“Failure to comply with this Compliance Notice may result in enforcement actions, including the issuance of an Enforcement Order, administrative fines, and/or criminal prosecution in accordance with the NDP Act, 2023,” the statement added.
The NDPC stressed that its actions were designed not only to enforce compliance but also to protect Nigerians’ data rights.
It said the NDP Act was enacted to “safeguard the fundamental rights, freedoms, and interests of data subjects as guaranteed under the Constitution of the Federal Republic of Nigeria, 1999,” while also providing a legal framework to ensure Nigeria’s “trusted and beneficial participation in regional and global economies through responsible use of personal data.”
The Commission further reaffirmed its resolve to entrench accountability in the country’s data protection ecosystem.
“The NDPC remains committed to ensuring a culture of accountability and trust in Nigeria’s data protection and privacy ecosystem, while safeguarding the rights of data subjects and strengthening the nation’s digital economy,” the statement added.
The commission has so far demonstrated its readiness to enforce the law by slamming heavy penalties on erring organisations.
Multichoice Nigeria was fined N766.2m for what the commission described as patently intrusive, unfair, unnecessary and disproportionate data practices, including illegal cross-border transfers of subscriber information.
Cybersecurity teams today face increasingly sophisticated attacks powered by artificial intelligence (AI), automation, and advanced persistent threats (APTs), making traditional reactive security measures insufficient.
To effectively counter these evolving dangers, organisations must adopt a proactive approach that leverages threat intelligence (TI). By anticipating potential threats, detecting malicious activities early, and mitigating risks before they escalate, businesses can strengthen their defenses and maintain resilience in a rapidly changing environment. This shift from reactive to proactive security strategies is essential for staying ahead of cybercriminals and safeguarding critical assets.
In its recent study, Kaspersky surveyed IT professionals across industries and regions to understand how businesses use threat intelligence to bolster their defenses. The findings reveal that while an overwhelming majority (81%) of organisations in the Middle East, Turkiye, and Africa (META) region and 80% in South Africa, are satisfied with their available threat intelligence, there is still significant room for improvement – particularly in integration, speed, and relevance.
The critical role of threat intelligence
Threat intelligence goes beyond data collection, it provides actionable insights into adversary tactics, techniques and procedures (TTPs). By studying attacker behaviour, security teams can detect threats earlier, refine defensive strategies and respond more effectively both during and after incidents.
The study highlights that 37% of companies in the META region and 35% in South Africa rely on specialised TI vendors for curated intelligence, while close to a third (31% and 28% respectively) engage in threat data exchanges with other organisations. Another 30% in the META region and 35% in South Africa gather intelligence from open sources, demonstrating the widespread recognition of TI’s value.
The importance of TI in cybersecurity cannot be overstated, as it helps organisations stay ahead of evolving threats and adapt their defenses accordingly. It enables proactive risk management and enhances the ability to anticipate potential attacks before they occur.
The most effective threat intelligence must be timely, reflecting the latest threats, a priority for 40% of respondents in the META region. It must also be actionable, seamlessly integrating into security workflows, which is a key concern for 40% of professionals in the META region.
Additionally, 36% of respondents emphasised the need for better analysis, including prioritisation and de-duplication, to make intelligence truly usable in real-world scenarios.
Key areas for improvement
While most organisations already benefit from TI, experts have identified several areas where enhancements could make a substantial difference. The single most pressing need, cited by 24% of respondents in the META region, is easier integration into existing processes, which would allow threat intelligence to be more seamlessly incorporated into daily security operations. 12% highlighted the importance of better analysis to improve accessibility, meaning that intelligence should be easier to interpret and act upon for security teams.
Meanwhile, 8% called for more robust comparative threat analysis across different systems, enabling organisations to better understand the context and relationships between various threats. Speed is another critical factor, with 12% emphasising the need for faster intelligence delivery to ensure timely responses to emerging threats.
Beyond these integration and usability concerns, professionals also prioritise quality and accuracy. 32% surveyed in the META region stress the importance of high-quality intelligence, which is precise, relevant, and reliable, to avoid false positives and missed threats.
Additionally, 32% seek more comprehensive coverage to ensure no critical threats slip through the cracks, emphasising the need for a broader scope of intelligence sources and insights to maintain a strong security posture.
Navigating today’s threat landscape demands reliable, expert-curated intelligence. While many organisations recognise its value and are satisfied with their current capabilities, they are searching for significant opportunities for improvement – particularly in areas such as integration, speed, and relevance.
By investing in these key areas, organisations can enhance their ability to respond swiftly and accurately to emerging threats, ultimately reducing risk and strengthening their security posture. Partnering with trusted providers like Kaspersky, which offers expert-curated insights and real-time intelligence, empowers businesses to navigate today’s challenging threat landscape with confidence.
To enable your InfoSec professionals to gain in-depth visibility into cyber threats targeting your organisation, use Kaspersky Threat Intelligence, which provides rich and meaningful context across the entire incident management cycle and helps identify cyber risks in a timely manner.
CBN Sets October 31 Deadline for Payment Companies to Comply with ISO 20022
Why Financial Literacy Must go Hand in Hand with Cybersecurity
NIIRA 2025, New Law Offers N2m Medical Compensation for Uninsured Accident Victims
FG Begins Restoration of Voice of Nigeria Shortwave Transmission
Lebara Nigeria, MVNO Oils Machine for Q3 Launch with Personalized Number Reservations
E-Financial3 days agoFBNQuest Merchant Bank Facilitates Landmark ₦5Bn Commercial Paper Programme for Accion Microfinance Bank
E-Business3 days agoNDPC Begins Probe of Banks, Others for Data Breaches
Telecom3 days agoDigital Realty Commits to Africa’s Digital Transformation @ Launch of LKK2 Data Center
E-Financial3 days agoUBA to Deepen Financial Inclusion, Boost Savings’ Culture with Super Savers’ Promo
Telecom3 days agoIntel–U.S. Partnership Reshapes Semiconductor Landscape with Historic Equity Agreement
E-Financial3 days agoFidelity Bank Resumes Intl Transactions on Naira Debit Cards
E-Financial3 days agoNigeria Leads Africa in Stablecoin Adoption with $22Bn in Transactions
Telecom3 days agoNITDA Alerts Nigerians to eSIM Security Flaw Deployed to Hijack Devices Worldwide