Kaspersky Digital Footprint Intelligence estimates that 2.3 million bank cards were leaked on the dark web, based on an analysis of data-stealing malware log files from 2023-2024.

On average, every 14th infostealer infection results in stolen credit card information, with nearly 26 million devices compromised by infostealers, including more than 9 million in 2024 alone. Kaspersky released its report on the infostealer threat landscape while the technology world gathers at MWC 2025 in Barcelona.

Kaspersky experts estimate that approximately 2,300,000 bank cards have been leaked on the dark web. This conclusion is based on an analysis of the log files from data-stealing malware, dated 2023-2024, that were leaked on the dark web market. While globally the share of leaked cards is well below one percent, 95% of the observed numbers appear technically valid.

Infostealer malware is not only designed to extract financial information, but also credentials, cookies and other valuable user data, which is compiled into log files and then distributed within the dark web underground community.

An infostealer can infect a device if a victim unknowingly downloads and runs a malicious file, for example one disguised as legitimate software, such as a game cheat. It can be spread through phishing links, compromised websites, malicious attachments in emails or messengers and various other methods. It targets both personal and corporate devices.

Data-stealer threat landscape: 26 million devices found to be compromised over 2023-2024

On average, every 14th infostealer infection results in stolen credit card information. Kaspersky Digital Footprint Intelligence experts found that nearly 26 million devices running Windows were infected with various types of infostealers in the past two years.

“The actual number of infected devices is even higher. Cybercriminals often leak stolen data in the form of log files months or even years after the initial infection, and compromised credentials and other information continue to surface on the dark web over time.

Therefore, the more time passes, the more infections from previous years we observe. We forecast the total number of devices infected with infostealer malware in 2024 to be between 20 million and 25 million, while for 2023, the estimate ranges between 18 million and 22 million,” says Sergey Shcherbel, expert at Kaspersky Digital Footprint Intelligence.

Beware of Redline, Risepro and Stealc stealers

In 2024, Redline remained the most widespread infostealer, accounting for 34% of the total number of infections.

The most significant surge in 2024 was in infections caused by Risepro, whose share of total infections increased from 1.4% in 2023 to almost 23% in 2024. “RisePro is a growing threat. It was first discovered two years ago, but seems to be gaining momentum.

The stealer primarily targets banking card details, passwords and cryptocurrency wallet data, and may be spreading under the guise of key generators, cracks for various software and game mods,” explains Shcherbel. Another rapidly growing stealer is Stealc, which first appeared in 2023 and increased its share from nearly 3% to 13%.

Plans are underway towards building a United Kingdom/Nigeria National Cybersecurity Architecture.   The UK/Nigeria Inward Cyber Trade Mission is to be facilitated by the National Information Technology Development Agency (NITDA).

Director-General National Information Technology Development Agency NITDA, Kashifu Inuwa CCIE at the meeting with some UK delegates on Monday in Abuja, said that President Bola Tinubu was committed to economic reforms and transformation, which digitisation could drive.

Inuwa noted that NITDA’s Strategic Roadmap and Action Plan (SRAP) 2.0, would enhance the digitisation of the country by ensuring digitally literate populace who were abreast with cybersecurity concerns.

He said the federal government was working towards embedding cybersecurity in every aspect of general activities, adding that 95 per cent of cyber breaches were as a result of human errors.

“We need to educate both the users and operators on cybersecurity, which is part of what we do and we have a target of achieving 95 percent digital literacy level now.

“We are looking at building the expertise and we are working on training our people on how to safeguard our digital space,” he said.

He added that they were conducting some research on emerging technologies like the Artificial Intelligence, Internet of Things, Blockchain, robotics and additive manufacturing.

The DG further explained that as emerging technologies evolved, there was need for cyber security to evolve.

“We need to evolve in the way we talk about cybersecurity and the way we secure the system we are building,” he said.

He added that in the past the use of AI never posed a threat but presently it required explanability to avoid misuse of the technology.

Inuwa also said that issues about cybersecurity was a global concern and addressing it would require strategic partnerships and working as a global ecosystem to gain cyber diplomacy.

He added that they were collaborating with other countries who would be working with local businesses to build security systems according to cyber landscape of Nigeria.

Mr Mark Smithson, Country Director, Department of Business and Trade (DBT), UK, in his response revealed that the relationship between Nigeria and the UK was valued at 7.5 billion Pounds and they were committed to continue strengthening it through building safe cyber spaces.

“The UK remains firmly committed to supporting Nigeria in tackling cyber security challenges and harnessing the opportunities of the digital age as global threads evolve.

“Our partnership is more crucial than ever in ensuring a safe and resilient cyberspace for businesses, governments and citizens alike.

“The UK is proud to bring world class expertise in cyber security to Nigeria, from cutting-edge technology, to capacity building initiatives because our strong track record in cyber resilience, threat intelligence and innovation presents valuable opportunity.

“We look forward to expanding our cooperation, sharing knowledge, deepening our bilateral trade and building a secure digital future together,” Smithson said.

Other speakers such as Dr Lawan Mohammed, Director, Cybersecurity NITDA and Mr Ross Gill took turns in explaining that Nigeria as a country would need expertise collaboration to build a strong cybersecurity infrastructure especially on the effective implementation of cybersecurity frameworks.

Other areas of expertise intervention, they mentioned were in building capacity of cybersecurity experts, which they said were about 8,300 and were insufficient to address cyber threats across the country.

Adding that the federal government would require expertise to develop threat intelligence, identify vulnerabilities, preserve Public Key Infrastructure, a resilient National Cybersecurity Architecture, among other areas.

They also recognised there were growing threats across the globe, saying that partnerships and sharing best practices could help build better defenses.

National Insurance Commission (NAICOM) has urged Nigerian insurance companies to develop and introduce cyber insurance products.

This is in response to the escalating digital risks accompanying global digitalization.

This initiative aims to provide coverage against cyber threats and data breaches, ensuring that businesses and individuals are protected in the evolving digital landscape.

To facilitate this development, NAICOM is collaborating with the National Information Technology Development Agency (NITDA) and the Nigeria Data Protection Commission (NDPC).

This partnership seeks to promote cyber insurance and ensure compliance with Nigeria’s Data Protection Regulations, emphasising the importance of data protection training for industry practitioners.

Despite the growing threat of cybercrime, cyber insurance remains underutilised in Nigeria. Industry reports indicate that many businesses and individuals overlook the importance of cyber insurance, even as global cybercrime losses are projected to reach $10.5 trillion by 2025.

NAICOM’s directive underscores the need for the insurance industry to adapt to the digital era by offering products that address contemporary risks, thereby enhancing the resilience of Nigeria’s digital economy.