E-Business
Kaspersky Reveals Half of Dark Web Exploit Listings Target Zero-day Vulnerabilities
Between January 2023 and September 2024, Kaspersky Digital Footprint Intelligence experts identified 547 listings to buy and sell exploits targeting software vulnerabilities.
These advertisements are posted on various dark web forums and shadow Telegram channels, with half involving zero-day and one-day vulnerabilities.
However, it is difficult to confirm whether these exploits are functional, as the dark market is rife with scams. Additionally, Kaspersky found that, on average, the cost of exploits for remote code execution vulnerabilities amounted to $100,000.
Exploits are tools used by cybercriminals to take advantage of vulnerabilities in various software programs, like those from Microsoft, to commit illegal activities, such as gaining unauthorised access or stealing data.
More than half of the dark web posts (51%) offered or sought to purchase exploits for zero-day or one-day vulnerabilities. Zero-day exploits target undiscovered vulnerabilities that software vendors have not identified and patched yet, while one-day exploits focus on systems that do not have the patch installed.
“Exploits can target any program, but the most desirable and expensive ones often focus on enterprise-level software. These tools enable cybercriminals to carry out attacks, which equate to substantial gains for them, such as stealing corporate information or spying on an organisation undetected.
However, some exploit offers on the dark web may be fake or incomplete, meaning they don’t function as advertised. Additionally, a significant portion of transactions are likely to occur in private.
These two factors complicate the assessment of the actual market volume for functional exploits,” explains Anna Pavlovskaya, Senior Analyst at Kaspersky Digital Footprint Intelligence.
The dark web market offers a wide array of different types of exploits. Two of the most widespread are those for RCE (Remote Code Execution) and LPE (Local Privilege Escalation) vulnerabilities.
According to an analysis of over 20 listings, the average price for RCE exploits is around $100,000, while LPE exploits typically cost about $60,000. RCE vulnerabilities are considered more dangerous, as they allow attackers to take control of a system or its components, or confidential data.
Dark web listings for buying and selling exploits, 2023-2024, where some offers can be repetitive. Source: Kaspersky Digital Footprint Intelligence
This year, the peak level in exploit sales and purchases occurred in May, with 50 relevant posts, compared to an average of about 26 per month in the period surrounding the surge. “Peaks in the exploit market’s activity are unpredictable and hard to link to specific events.
“Interestingly, in May, the dark web witnessed the sale of one of the most expensive exploits during the analysed period – allegedly, for a Microsoft Outlook zero-day vulnerability priced at nearly two million US dollars,” elaborates Anna Pavlovskaya.
“Overall, the exploit market remains stable; while activity fluctuates, the threat is always present. This highlights the need for cybersecurity hygiene practices, such as the regular patching and monitoring of digital assets on the dark web.”
Nigerian government, through the Office of the National Security Adviser (ONSA) and the National Information Technology Development Agency (NITDA), has announced a strategic collaboration to strengthen cybersecurity and clean up the nation’s cyberspace.
Recognizing that cybercrime knows no borders, Nigeria also reaffirmed its commitment to fostering stronger global partnerships within the cybersecurity ecosystem.
This announcement was made during a press conference before the inaugural National Cybersecurity Conference, which is scheduled to take place in Abuja from July 9th to 11th, 2025.
Sa’ad Abubakar, national cybersecurity coordinator from the Office of National Security Advisor, said fighting cybercrime must take the whole of society and the whole of the government approach.
According to him, “Apart from the deterrent approach whereby government agencies such as Economic and Financial Crimes Commission (EFCC) arrest individuals, take them to court and prosecute them, the youth can be nurtured into better citizens who can showcase their capacity in better ways and be useful to the country.”
Similarly, Kashifu Abdullahi, director-general, NITDA, also stressed the need for collaborative efforts in fighting cybercrimes.
According to him “Then, in addition to that, we also want to build a stronger global collaboration with the global cyber security ecosystem, because when you look at cybercrime in general, it doesn’t respect the borders.
“Someone can commit a crime from Ghana using a Nigerian ID in the US. So you can look at him physically in a different jurisdiction, pretending to be in another jurisdiction, committing the crime in another jurisdiction.
“So without that kind of synergy and working together, it will be difficult to address these challenges. The third one is challenge. The third one is getting an alternative to cybercrime for our kids in Nigeria. We have this as a major challenge.”
Inuwa further highlighted the upcoming conference’s importance, noting that it would tackle key issues through workshops, discussions on emerging threats, cross-border cybersecurity collaboration strategies, and training programmes.
He also announced that the National Cybersecurity Conference 2025 would feature the Cybersecurity Excellence Awards, recognising top contributions in the field.
The DG extended an invitation to global partners to collaborate with Nigeria in building a safer digital future.
The press conference was attended by notable figures, including Ahmad Sa’ad Abubakar, National Coordinator of, the National Cybersecurity Coordination Centre (NCCC); Hanniel Jafar, Representative of the President, of Cyber Security Experts Association of Nigeria (CSEAN); Ankit Shukla, Managing Director, QNA Marketing Management LLC and members of the press and other stakeholders.
XIAN Telecom has acquired an 8% stake in pan-African e-commerce company Jumia Technologies, citing the platform’s fintech and logistics strengths as key drivers of its backing.
This marks the first major telecom investment in Jumia since MTN Group’s exit in 2020.
AXIAN, a fast-growing telecom and digital services provider with operations across Africa, disclosed the purchase in a Schedule 13D filing with the U.S. Securities and Exchange Commission.
While the financial terms were not disclosed, AXIAN Telecom CEO, Hassan Jaber, described the move as a strategic alignment with Jumia’s growth trajectory and digital ecosystem.
“Jumia’s achievements in digital retail and fintech, particularly through JumiaPay and its logistics network, make it a very attractive investment for us. We believe in Jumia’s potential to promote financial and economic inclusion, which aligns with our core values,” said Jaber.
Once dubbed the “Amazon of Africa,” Jumia became the first African-founded tech company to list on the New York Stock Exchange in 2019.
But years of underperformance, leadership changes, and competitive pressures dented investor confidence.
In October 2020, South Africa’s MTN Group offloaded its 18.9% stake for $138 million, well below the $698 million value it once held post-IPO.
Since then, Jumia has undergone a significant transformation. Under CEO Francis Dufay, appointed in 2022, the company exited low-performing markets like South Africa and Tunisia, cut costs, and doubled down on core markets – Nigeria, Kenya, Egypt, and Morocco.
The firm is now focused on high-growth verticals, including everyday essentials and digital financial services.
Jumia’s regional CEO for East Africa, Vinod Goel, recently revealed plans to scale up international brand offerings and open its logistics network to third-party businesses.
Jaber underscored that AXIAN Telecom’s investment signals renewed confidence in Jumia’s long-term potential.
The telecom firm’s CEO said the company views Jumia as a key player in advancing Africa’s digital economy, aligning with AXIAN’s mission through its fintech and digital infrastructure brands such as Yas and Mixx by Yas.
Abisoye Coker-Odusote, director general, National Identity management commission (NIMC) has said that the commission is set to register 95 percent of Nigerians into the National Identity Database before December 2025.
Abisoye Coker-Odusote,, DG, NIMC
She made this statement at a press briefing to highlight the commissions goal aligns with President Bola Tinubu’s Renewed Hope Agenda, particularly on digital governance and inclusive development.
The mass enrollment drive will be powered by a combination of improved infrastructure, expanded registration centres, and robust public sensitization campaigns.
As of May 2025, NIMC reports over 120 million Nigerians have been enrolled, and about 100 million more would be captured by December.
Telcos Threaten to Disconnect Banks over Misinformation on New USSD Charges
MTN Nigeria Plans N900Bn in Service Upgrade
NDIC Calls for Inputs to IADI Core Principles for Effective Deposit Insurance
Netflix Hikes Subscription Fees Again in Nigeria over “Market Conditions”
DSO: STBMAN Accuses NBC of Contempt, Seeks Presidential Intervention
E-Business3 days agoNIMC Plans to Register 95 Percent Nigerians by December
News3 days agoJAMB Waxes Worriedly over Rising Digital Exam Fraud
Telecom3 days ago9mobile Nigeria Inks Agreement to Roam with MTN
Telecom3 days agoIHS Nigeria Moves to Enhance G4S Secure Solutions Site Patrols and Increase Operational Efficiency with Patrol Vehicles
E-Business2 days agoAXIAN Telecom Invests in Jumia Post-MTN Era
Telecom3 days agoBanks, Telcos to Start Deducting USSD Charges from Airtime Today
- E-Financial2 days ago
UBA Compiles with NCC, to Deduct USSD from Customers’ Accounts
E-Financial3 days agoFitch Upgrades Fidelity Bank’s National Rating to ‘A+(nga)’, Affirms Long-Term IDR at ‘B’