E-Business
Kaspersky Report shows Financial Trojans Increase in Nigeria by 32% in Q2 2021
With digital transformation a top priority on the corporate agenda as companies identify new ways to grow their business, cyber attackers and opportunist cybercriminals remain very active.
Trojan horse virus
And although Africa is not necessarily considered a focus area for the more sophisticated types of cybercriminal activity such as targeted attacks or advanced persistent threats (APTs), the continent is certainly not immune to these or other types of cyber risks, warn Kaspersky researchers.
When looking at the general cyberthreat landscape as it impacts consumers and businesses, Kaspersky research shows that in 2020, worldwide, approximately 10% of computers experienced at least one malware attack.
Interestingly, in some African countries, including South Africa, the figure was only slightly under the global 10% average, making the African region comparable to that of North America or Europe in terms of cyberattacks.
On some parts of the continent, in countries like Liberia Tunisia, Algeria and Morocco as examples, Kaspersky has seen a slightly higher rate, while other parts show a lower rate – a 5% or 6% average. For the first quarter of 2021, the figures are only slightly lower than 10%, both in relative and absolute terms.
Says David Emm, Principal Security Researcher at Kaspersky; “Generally speaking, and based on our research, Africa has the same hit rate as we would see for other parts of the globe when it comes to cyberattacks and activity.
“This only emphasises that the cyber threat landscape truly does incorporate the whole globe where no continent or country is free of this growing danger and where all consumers, businesses and industries alike need to pay attention to effective cybersecurity measures – and especially during the current pandemic and resultant turbulent times.”
No respite in an evolving cybercrime landscape
In South Africa, Kenya and Nigeria, Kaspersky’s research has identified the top malware families as ransomware, financial/banking trojans, and crypto-miner malware. When comparing Q1 2021 with Q2 2021, Kaspersky saw a 24% increase in ransomware in Q2 2021 in South Africa, as well as an increase of 14% in crypto-miner malware.
In Kenya and Nigeria, Kaspersky saw a large increase in financial/banking trojans in Q2 2021 when compared to the figures for Q1 2021 – a 59% increase in Kenya and a 32% increase in Nigeria.
While on a technical level, not much has changed when it comes to cyberattacks, what is different is that the pandemic presents a persistent topic in which the world has a vested interest in.
So, unlike the Olympics or Valentine’s Day which are limited in terms of a timeline, the pandemic offers a wealth of opportunities for cybercriminals to use malware to attack. Everything from the daily numbers and lockdown restrictions to vaccinations, hackers are leveraging on every aspect of the current situation to compromise systems.
“While the bulk of attacks are still speculative and randomly targeting individuals and businesses, there is a shift happening with the increase of APTs and more strategically targeted based attacks.
“These use continuous, clandestine, and sophisticated hacking techniques to gain access to a system and remain inside for a prolonged period, with potentially destructive consequences. Because of the time and effort required to perpetrate such an attack, these are often levelled at high value targets, such as nation states and large businesses,” adds Emm.
Furthermore, another concern is that as the cyberthreat landscape evolves, the nature of malware is changing.
Continues Emm; “Take ransomware as an example. In the beginning, it was very random targeting as many people as possible hoping for a relatively small amount of money paid in ransom.
“During the past five years, there has been a shift with a decline in the number of ransomware families being developed as well as an overall global decline in attacks. However, attackers are now focusing on specific companies and individuals where they can get the maximum benefit.
“The new approach of ransomware is to expose data, negatively impacting the reputation of a company. To this effect, financial crime has become more sophisticated and organised.”
Financial institutions a top targeted industry
The financial services sector remains a top targeted industry in Africa when it comes to cybercriminal activity and such cyberthreats – not surprising when one considers the digital first approach this sector continues to take, driven by the needs and expectations of its customers.
“It is relatively easy for a hacker to target an individual and capture passcodes, one-time passwords, and install malware on their computers to get financial information. Increasingly, this is expanding to financial institutions given the sheer number of new entrants in the market emerging. For hackers, online or cyber fraud offers direct monetisation of an attack and gives them access to money as quickly as possible,” adds Emm.
Financial based malware and cyberattacks are also becoming more targeted, complicated, and difficult to prevent, and with digital transformation progressing at a rapid rate within such a sector, there is no shortage of attack surfaces for cybercriminals to exploit.
“In a world where cybercrime remains rife and is only fuelled by aspects like the pandemic, there is never a moment one should not consider the implications of a cyberattack, especially as the cyberthreat landscape evolves and become even more targeted and sophisticated than it was a mere few years ago. Cybercrime is a business.
This means that consumers and companies alike must remain vigilant against an increasing attack surface. Not only does this entail a more focused cyber training approach for staff within an organisation, but also using the latest technologies that feature artificial intelligence and machine learning for accurate and proactive protection and prevention in real-time,” concludes Emm.
Nigerian Postal Service (NIPOST) has signed an international mail partnership with KLM Royal Dutch Airlines for improved delivery access to over 200 countries without middlemen.
Tolani Odeyemi, postmaster-general and chief executive officer of NIPOST, described the deal as a “major milestone” for the country’s logistics and postal sector.
In a statement on X on Monday, Odeyemi explained that the new agreement marks NIPOST’s first direct international airline partnership for several years.
“For a long time, NIPOST operated without any direct partnerships with international airlines, relying heavily on multiple third-party handlers,” the Postmaster-General stated. This often resulted in delays, higher costs, and uncertainty around the delivery of packages.”
She explained that under the new arrangement, KLM will directly handle all outbound international mail from Nigeria, eliminating the need for intermediaries.
“This translates to faster and more reliable delivery, reduced risk of loss or damage, lower handling charges, and access to over 200 countries through KLM’s global network,” the Postmaster-General stressed.
According to Odeyemi, NIPOST’s breakthrough came after it began settling long-standing debts owed to international carriers, a step she said was key to “rebuilding global trust” in Nigeria’s postal system.
She revealed that talks were also ongoing with Ethiopian Airlines to bolster regional and continental logistics, particularly on African and Eastern routes.
“Our goal is clear and unwavering: to connect Nigeria regionally and globally, efficiently, securely, and affordably,” Odeyemi asserted.
The NIPOST CEO described the development as a significant win for Nigerian businesses and small and medium-scale enterprises that rely on international shipping, stating, “You now benefit from quicker, more affordable international shipping, greater peace of mind with improved reliability, and new potential to reach and grow in global markets.”
Odeyemi commended the teams behind the scenes and pledged continued improvements in service delivery, adding that the deal signals a turning point for the agency.
The evolution of AI is not only affecting various industries, but it has also transformed cybercriminals’ tactics. One alarming trend is the use of AI to enhance phishing scams, refining them, targeting specific individuals, and making these attacks almost impossible to recognise.
Kaspersky reviews how AI is changing phishing techniques and why even the most cyber-aware employees may fall for these scams.
According to a recent Kaspersky study, the number of cyberattacks experienced by organisations in the last 12-months is reported to have increased by nearly half (48%) in the Middle East, Turkiye and Africa (META) region.
The most ubiquitous threat came from phishing attacks, with 51% of those questioned in the META region reporting this type of incident. With AI becoming a more prevalent enabler for cybercriminals, over half of the respondents in META (53%) anticipate significant growth in the number of phishing attacks. In this text, Kaspersky examine how AI is used in phishing and why experience alone is sometimes not enough to avoid becoming a victim.
Personalisation through AI
Previously, phishing attacks relied on a generic mass message sent to thousands, hoping some of the recipients would fall for the bait. AI has changed this into scripting highly personalised phishing emails in large numbers. Using publicly available information like that on social media, job boards, and companies’ websites, these AI-powered tools can generate emails tailored to an individual’s role, interests, and communication style.
For example, a CFO might receive a fraudulent email that mirrors the tone and formatting of their CEO’s messages, including accurate references to recent company events. This level of customisation makes it exceptionally challenging for employees to distinguish between legitimate and malicious communications.
Deepfake technology
AI has also introduced deepfakes into the phishing arsenal. These are increasingly being leveraged by cybercriminals to create fake but highly accurate audio and video messages, crafted to reflect the voice and appearance of the executives they seek to impersonate.
For example, in one reported case, attackers used a deepfake to impersonate multiple members of staff during a video conference, convincing the employee to transfer approximately $25.6 million. As deepfake technology continues to advance, it is expected that such attacks will become more frequent and harder to detect.
Bypassing traditional defenses
Cybercriminals can manipulate the script of traditional e-mail filtering systems with the use of AI. By analysing and mimicking legitimate email patterns, AI-generated phishing emails can bypass security software detection. Machine learning algorithms can test and refine phishing campaigns in real time, enhancing their success rates and making them increasingly sophisticated.
Why experience is not enough
Even experienced employees are falling victim to these advanced phishing attacks. The level of realism and personalisation that AI can achieve may override the skepticism that keeps experienced professionals cautious. Moreover, AI-generated attacks often exploit human psychology, such as urgency, fear, or authority, pressuring employees into acting without double-checking the authenticity of the request.
Combatting AI-hyped phishing
To defend against AI-driven phishing attacks, organisations must adopt a proactive and multi-layered approach that emphasises comprehensive cybersecurity. Regular, up-to-date AI-focused cybersecurity awareness training is critical for employees, helping them identify the subtle signs of phishing and other malicious tactics.
Kaspersky Automated Security Awareness Platform can help with such training. Alongside this, businesses should implement robust security tools, such as Kaspersky Next and Kaspersky Security for Mail Server, capable of detecting anomalies in emails, such as unusual writing patterns or suspicious metadata.
A zero-trust security model also plays a vital role in minimising the potential damage of a successful attack. By restricting access to sensitive data and systems, this approach ensures that even if attackers breach one layer of security, they cannot compromise the entire network. Together, these measures create a comprehensive defense strategy, combining advanced technology with vigilant human oversight.
At least 10 out of every 100 Nigerians have fallen victim to data breaches since 2004, according to a new report by global cybersecurity firm Surfshark, raising serious concerns about the country’s long-standing vulnerability to cyber threats.
Surfshark’s research is based on data gathered from 29,000 publicly available databases.
Each unique breached email address is treated as a separate user account, and breaches often include additional personal data such as passwords, phone numbers, IP addresses, and postal codes.
The data was anonymised before analysis, and countries with populations under one million were excluded from the study.
Findings of the report revealed that a staggering 23.2 million Nigerian user accounts have been compromised in the past two decades, an alarming figure in a country with an estimated population of over 230 million.
This includes 7.3 million unique email addresses and 13 million passwords leaked into the public domain.
“Cyberattacks remain a persistent and growing threat globally, and Nigeria is no exception,” Surfshark stated in its analysis.
Despite a significant 85 per cent drop in new data breaches in the first quarter of 2025, falling from the previous quarter’s numbers—Nigeria still recorded over 119,000 breached accounts during the period. This places the country 34th worldwide in total breach volume.
Even with the recent decline, the scale and depth of past breaches remain troubling.
According to the report, 56 percent of Nigerian users affected by breaches are at heightened risk of identity theft, extortion, and unauthorised access to their online accounts.
“In Q1 2025 alone, an estimated one Nigerian account was breached every minute,” Surfshark noted.
The global picture also shows a dramatic shift: the number of leaked accounts dropped 93 percent year-on-year—from nearly 974 million in Q1 2024 to just 68.3 million in Q1 2025.
Countries with the highest number of breaches include the United States (16.9 million), Russia (4.4 million), and India (4.2 million).
However, when adjusted for population, smaller nations like South Sudan, Spain, and Slovenia reported the highest breach density, with South Sudan recording 61 breached accounts per 1,000 residents.
Luís Costa, Surfshark’s research lead, warned that the downturn in breach numbers should not lead to a false sense of security.
“Cyberthreats are constantly evolving, and attackers are adapting their tactics. Strong security practices, frequent password updates, and enabling two-factor authentication remain essential,” Costa stated.
The report underscores the urgent need for improved cybersecurity infrastructure and public awareness in Nigeria, as millions remain exposed to potential exploitation due to past breaches.
Nigeria to Receive $3Bn Telecoms Infrastructure in June – Minister
NIPOST Partners KLM on Global Mail Delivery
CBN Issues Advisory on Scammers Flaunting Fake Contracts
Airtel Money Plans IPO to Compete in Fintech Space
Legend Internet Debuts Nigeria’s First Fibre-to-the-room Service
E-Business1 day agoNIN: FG Increases DoB Update Fee by 75Percent to N28,574
Broadcasting1 day agoAfreximbank Unveils Third Edition of Short Film Competition ‘Creative Africa Nexus’
General News1 day agoNIMASA Embraces Technology to Strengthen Regulatory Mandate
Telecom1 day agoMTN Commits $10Bn to Nigeria’s Digital Infrastructure
E-Business1 day ago10 Percent of Nigerians Affected by Data Breaches since 2004
E-Financial1 day agoSEC Intensifies Fight Against Ponzi Schemes With Market
News1 day agoSERAP Challenges CBN to Publish Local Government Allocations
News1 day agoCFUIS Expands to Nigeria, Boosting U.S. Immigration and Business Opportunities