Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

E-Business

Kaspersky Blocked over 75,000 Attacks on IoT Devices in Nigeria and Kenya in 2022

Published

on

Kindly share this post

Kaspersky detected and blocked 45,562 cyberattacks on Internet of Things (IoT) devices in Kenya and 30,089 cyberattacks on IoT devices in Nigeria.

In South Africa this figure is 221,695. All these attacks were blocked on Kaspersky honeypots – decoy devices used to attract the attention of cybercriminals and analyse their activities.

IoT devices include wearables, smart home appliances, smart city systems, self-driving cars, automated retail checkouts, and other smart devices for home and business use.

These devices can collect and transfer data over a wireless network without human input. Cybercriminals use networks of infected smart devices to conduct DDoS attacks or as a proxy for other types of malicious actions.

The number of attacks on IoT devices has been increasing exponentially over the last years. This is related both to the activity of criminal actors and to the increasing number of IoT devices that are in use.

According to open research, in 2020 there were 42,4 million IoT devices operating in Sub-Saharan Africa. By 2030, the number is expected to triple and reach 264 million¹. Capitalising on weak security of IoT devices, cybercriminals are intensifying their attacks.

A brute force attack uses trial-and-error to guess login and password info or encryption keys, with hackers working through all possible combinations to guess correctly.

In the African region throughout 2022 there were over 93,000 attempts to brute force logins and passwords to IoT devices using only the most popular combinations (examples are provided in the table below); the total number of brute force attempts is even higher.

“As the number of IoT devices grows and attacks intensify, cybercriminals use both advanced and simple tactics to infiltrate smart devices. One of these tactics is using simple password and login combinations – our research showed that on hundreds of thousands of IoT devices the most common login-password combinations are admin-admin, guest-guest, or other variants that come as default on different kinds of equipment,” commented Vladimir Dashchenko, security expert at Kaspersky ICS CERT². “It is easy to change the default password, so we urge everyone to take this simple step towards securing your smart devices.

Speaking of more thorough protection, IoT vendors should consider implementing the next generation cybersecurity approach in their products – where devices would feature innate, built-in protection that would make them Cyber Immune.

Such technology is already available on the market, including offers from Kaspersky. For instance, Kaspersky IoT Secure Gateway system is designed to serve as a secure gateway for the Internet of Things on an enterprise network.”

Given the diversity of IoT devices and their related cybersecurity risks, the need for their protection is clear, especially when it comes to smart cities or critical infrastructure. Traditional measures are not sufficient for IoT protection, making it crucial that specialised security solutions are implemented.

To keep your devices safe, Kaspersky recommends users:

  • Install updates for the firmware you use as soon as possible. Once a vulnerability is found, it can be fixed through patches within updates.
  • Periodic rebooting will help get rid of malware already installed (although in most cases the risk of reinfection will remain).
  • Change the factory passwords at initial setup, use complex passwords at least 8 characters long, including upper and lower-case letters, numerals, and special characters.
  • Use a strict access policy, network segmentation and a zero-trust model. This will help minimise the spread of an attack and protect the most sensitive parts of the infrastructure.

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NDPC Probes Suspected Data Breach in Examination Centres

Published

on

Data Breach
Kindly share this post

Nigeria Data Protection Commission (NDPC) has launched an investigation into allegations that the confidentiality and integrity of candidates’ personal data may have been compromised by hackers.

NDPC Probes Suspected Data Breach in Examination Centres

The Commission initiated the inquiry following concerns over possible data breaches during examinations.

Preliminary findings indicate that several examination centres may not have implemented adequate technical and organizational measures to safeguard candidates’ personal information, as required under data protection regulations.

Although the incident reportedly affected 379, 997 candidates, the NDPC’s investigation is poised to cover a systemic audit of data processing and third parties.

It will be recalled that JAMB recently admitted that a technical error on its platform affected a total of 379,997 candidates in 157 examination centres across Lagos and the South-East.

Further investigation led to the arrest of at least 20 suspects who are currently in the custody of the Department of State Services and the Nigerian Police Force.

 

 

 


Kindly share this post
Continue Reading

E-Business

Nigeria Among Hotspots as Kaspersky Warns of Rising Ransomware Threat in Africa

Published

on

Kindly share this post

Cyber security firm, Kaspersky, has once again warned that sophisticated cybercriminals increasingly target Africa as ransomware and advanced persistent threats (APTs) escalate across the region.

Speaking at the company’s annual Cyber Security Weekend for the Middle East, Turkiye and Africa (META) region, the cybersecurity firm’s Global Research and Analysis Team highlighted growing digital threats affecting African nations.

Kenya, Nigeria, and South Africa emerged as hotspots, with Kenya recording one of the highest web threat incident rates at 20.1% in first quarter 2025.

“While ransomware is less prevalent in Africa due to lower levels of digitisation and economic constraints, countries like South Africa and Nigeria are seeing a sharp rise in attacks,” said Sergey Lozhkin, head of META and APAC regions at Kaspersky.

Kaspersky noted a 0.01 percentage point increase in African ransomware cases year-on-year, reaching 0.41%, still below global and Middle Eastern averages, but a troubling sign for the continent’s emerging digital infrastructure.

Experts warned that attackers are refining their tactics, shifting focus to unconventional entry points like IoT devices, smart appliances, and misconfigured hardware.

“As these economies expand digitally, sectors such as manufacturing, finance and government are becoming key targets,” said Lozhkin

The cyber-crime landscape is evolving quickly, fuelled by AI tools and dark web access to large language models, which enable less skilled actors to launch convincing phishing and malware campaigns.

Groups like FunkSec, which uses AI-generated code and a low-cost ransom model, are redefining ransomware operations.

“African organisations face the dual challenge of expanding digital footprints and limited cybersecurity awareness. This makes layered defense strategies, including network segmentation, real-time monitoring and regular staff training, essential,” stated Lozhkin

Kaspersky continues to monitor 25 active APT groups in the META region, including SideWinder and MuddyWater, some of which are known to target African institutions.

To bolster defenses, the firm recommends using tools such as its free Anti-Ransomware Tool for Business and the Kaspersky Next suite for threat visibility and response.

 


Kindly share this post
Continue Reading

E-Business

Nigeria Launches Cybercrime Team with Commonwealth, UK Support

Published

on

Kindly share this post

Nigeria recently launched a new joint case team to step up its response to cybercrimes that affect people and businesses at home and abroad.

Nigeria Launches Cybercrime Team with Commonwealth, UK Support

The ‘Joint Case Team on Cybercrime’ brings together Nigeria’s key justice and security agencies to work as one, making it easier to detect, investigate, and prosecute digital offences.

It is supported by the UK National Crime Agency, the UK Foreign, Commonwealth and Development Office, and the Commonwealth Secretariat, as part of a wider effort to promote international cooperation on cybercrime.

Speaking at the launch in Abuja, Prince Lateef Fagbemi SAN, minister of justice and attorney general of the federation described the initiative as “a bold and transformative stride in Nigeria’s justice system.”

He said that although Nigeria has a national legal framework to address cyber offences, laws alone are not enough.

Nigeria is among the countries most affected by cybercrime around the world, with increasing financial losses.


Kindly share this post
Continue Reading

Trending