E-Business
Kaspersky Presents Insight on 14% Increase in Spyware Attacks on Businesses in Africa @ GITEX Africa

As part of the company’s participation at the GITEX Africa conference, taking place in Morocco on 14-16 April 2025, Kaspersky will address the dynamics for cyberthreats in the African region as per the latest anonymised data from the Kaspersky Security Network (KSN)¹.
From 2023 to 2024 businesses in Africa were targeted by web threats, on-device threats, and attacks aiming to steal data, including spyware and password stealers.
Phishing and ransomware continue to be significant threats in the region, with 66 million phishing link clicks seen by Kaspersky in the African region in 2024, including over 14.8 million phishing link clicks by corporate users.
Web-based threats, or online threats, are a category of cybersecurity risks that may cause an undesirable event or action affecting users browsing the Internet.
According to Kaspersky data, there were 131 580 587 web threats detected in 2024 in the African region, including almost 20 million attack attempts in Kenya, almost 17 million in South Africa, and 12.6 million in Morocco. Businesses were targeted by web threats more often in 2024 than in 2023, with threat detections increasing by 1.2%.
Local (on device) threats include malware that is spread via removable USB drives, CDs and DVDs, or that initially makes way onto the computer in non-open form (for example, programs in complex installers, encrypted files, etc.).
According to Kaspersky telemetry, local (on device) threat detections in organisations in the African region in 2024 increased by 4% compared to 2023. Among the countries that saw growth in local threats detected in organisations were Nigeria (169% increase), Ethiopia (86%), South Africa (32%), Senegal (11%), and Morocco (9%).
There has been a spike of threats related to data theft. According to Kaspersky data, there was a 14% growth in spyware attack detections on businesses in the African region from 2023 to 2024.
Spyware is secretly installed on a user’s computer to monitor their actions and collect their data. Apart from that, there has been a 26% increase in password stealer detections. Password stealers are a type of malware designed to harvest login credentials and other sensitive data.
“Our statistics show an increase in attack detections for several types of cyberthreats, and the factors driving these increases are multifaceted. In the B2B sector, the continuing shift toward hybrid work models and the rush to digitise operations — often outpacing cybersecurity investments — may leave businesses in Africa exposed to advanced persistent threats.
In the B2C space, the explosion of digital financial services, coupled with low digital literacy rates, makes individuals prime targets for opportunistic attacks,” comments Maher Yamout, Lead Cybersecurity Researcher with Kaspersky Global Research and Analysis Team.
“Organisations in Africa should prioritise a unified approach by enhancing collaboration, investing in specialised cybersecurity training, and promoting digital literacy to effectively combat the rising tide of cybercrime. Initiatives like the African Cyber Surge operation and targeted educational programs can serve as blueprints for building a resilient digital ecosystem across the continent.”
E-Business
Microsoft Servers Hacked by Chinese Groups

Chinese “threat actors” have hacked Microsoft’s SharePoint document software servers and targeted the data of the businesses using it, the firm has said.
China state-backed Linen Typhoon and Violet Typhoon as well as China-based Storm-2603 were said to have “exploited vulnerabilities” in on-premises SharePoint servers, the kind used by firms, but not in its cloud-based service.
The US tech giant has released security updates in response and has advised all on-premises SharePoint server customers to install them.
“Investigations into other actors also using these exploits are still ongoing,” Microsoft said in a statement.
The firm said it had “high confidence” the hackers would continue to target systems which have not installed its security updates.
It added that it would update its website blog with more information as its investigation continues.
Microsoft said it had observed attacks in which hackers had sent a request to a SharePoint server “enabling the theft of the key material by threat actors”.
Charles Carmakal, chief technology officer at Mandiant Consulting firm, a division of Google Cloud, told reporter, it was “aware of several victims in several different sectors across a number of global geographies”.
Carmakal said it appeared that governments and businesses that use SharePoint on their sites were the primary target.
A number of adversaries who stole material encoded by cryptography were then able to regain ongoing access to the victims’ SharePoint data, he said.
“This was exploited in a very broad way, very opportunistically before a patch was made available. That’s why this is significant,” Carmakal said.
Carmakal said the “China-nexus actor” was deploying techniques similar to previous campaigns associated with Beijing.
Microsoft said Linen Typhoon had “focused on stealing intellectual property, primarily targeting organizations related to government, defence, strategic planning, and human rights” for 13 years.
It added that Violet Typhoon had been “dedicated to espionage”, primarily targeting former government and military staff, non-governmental organizations, think tanks, higher education, the media, the financial sector and the health sector in the US, Europe, and East Asia.
Meanwhile, Storm-2603 was “assessed with medium confidence to be a China-based threat actor”.
E-Business
NIMC Warns Nigerians of Fake NIN Website

National Identity Management Commission (NIMC) has issued a public warning that it is not associated with NINcard.com.
According to the commission, the website has been circulating online to offer services for Nigerians seeking National Identification Number (NIN) services.
NIMC, in a post on its official X account on Wednesday, said, “NINcard.com is not in anyway affiliated to NIMC. Stay vigilant!”
The warning was accompanied by screenshots of fake payment receipts and OTP request pages from the website, both of which were boldly stamped “FAKE” by NIMC to alert the public.
E-Business
NITDA, API Partner Against Harmful Online Content

National Information Technology Development Agency (NITDA), in partnership with the Advocacy for Policy and Innovation (API), has convened a one-day workshop in Abuja to advance dialogue on the draft Online Harm Protection (OHP) Bill to confront harmful online content.
The bill, a rights-based, locally rooted, and multi-stakeholder initiative, is aimed at addressing the challenges of the digital age.
The event, which held yesterday, brought together government officials, civil society, academics, digital platforms, and legal experts to shape a policy framework designed to combat online ills such as cyberbullying, disinformation, hate speech, digital exploitation, and gender-based violence, while safeguarding democratic freedoms and digital inclusion.
In his keynote remarks, Kashifu Inuwa, director general, NITDA urged a paradigm shift in the way society engages with digital technologies.
“For almost two decades, we have viewed digital technology through a consumer lens. But these technologies are not just products and services. They are transforming how we live, work, and interact. They shape our politics, our society, and our democracy,” he said.
Warning against unaccountable digital power in the hands of private corporations, the DG likened the digital journey to the tale of Alice in Wonderland, where initial fascination with innovation has given way to deeper concerns about privacy, autonomy, and manipulation by big tech platforms.
“We thought we were using Google, but now we realise Google is using us. Social media, once a tool of expression, has become a tool of surveillance and influence,” Inuwa noted.
He, therefore, emphasised the urgency of developing a democratic and accountable framework. He explained that following the 2021 Twitter ban, NITDA facilitated dialogue between the government and platform operators, leading to a Code of Practice that stressed Nigeria’s sovereignty and legal standards.
According to him, the same process birthed the multi-stakeholder steering committee and the OHP White Paper in December 2024, laying the foundation for the current legislative push.
Earlier in her opening remarks, Victoria Manya, co-founder, API, observed the moral and civic necessity of the bill.
Her words: “The internet did not break society, it merely revealed its unfiltered version. Every day, Nigerians are exposed to harassment, disinformation, exploitation, and even algorithmic violence. The OHP Bill is not a war on the Internet. It is a peace offering to its users, a social contract for a digital future that is safe, inclusive, and democratic.
“We cannot answer the question of algorithmic power with unchecked state control. We must answer it with shared, rights-based governance. This bill must not be written for the people, but with them.”
- E-Financial3 days ago
Kuda Unveils New Wallet for Multiple Currencies
- Telecom3 days ago
Telcos Resume SIM Card Sales after 2-Week Halt
- Telecom3 days ago
Nigeria, Others Achieve 84% Adult Mobile Phones Penetration
- E-Business3 days ago
How AI Alert by Airtel is Transforming Mobile Security in Africa
- E-Business3 days ago
NITDA, API Partner Against Harmful Online Content
- Telecom2 days ago
Telcos: How and Why Network Services have Been Poor
- Telecom2 days ago
Glo Launches Nigeria’s First-of-its-kind Device Protection Plan
- News3 days ago
Horn of Africa Leaders Seek Enhanced Digital Integration for Increased Regional Growth