E-Business
Nigeria, Others See a Decrease of Ordinary Threats, Experience Increase of Targeted Malware
According to Kaspersky’s latest research on the threat landscape trends, South Africa, Kenya and Nigeria are facing a dramatic change in the threat landscape.
While regular, self-propagating malware is decreasing dramatically, as it is no longer effective and cannot fly under security radars, the region will see the growth of new cybercrime models in the upcoming year.
While comparing the overall number of mass cyberattacks in 2021, security researchers at Kaspersky noticed a 7.5% decrease in Nigeria, 12% decrease in South Africa and an unprecedented 28.6% decrease in Kenya.
The reason for such a change was the introduction and popularisation of new cybercrime models in the region, with cybercrime tools becoming more targeted along with a long running trend where malware creators rely not on the technical advantage of their technologies over security protection, but on the human factor.
This has stimulated the evolution of phishing schemes in 2021. In particular, the region saw a wave of ‘Anomalous’ spyware attacks.
The usual phishing spyware attack begins when attackers infect a victim by sending them an e-mail with a malicious attachment or a link to a compromised website and ends when the spyware is downloaded and activated on the victim’s device.
Having gathered all necessary data, the operator usually ends the operation by attempting to leave the infected system unnoticed.
In the anomalous attacks, however, the victim’s device becomes not only a source of data but also a tool for spyware distribution.
Having access to the victim’s email server, the malware operators use it to send phishing emails from a legitimate company’s email address. In this case, anomalous spyware attacks an organisation’s server for collecting stolen data from another organisation and sending further phishing emails.
“The Anomalous spyware attacks have a huge potential for growth in South Africa, Kenya and Nigeria in 2022, because unlike regular spyware the entry level for attackers who wish to employ this tactic is significantly lower – since instead of paying for their own infrastructure, they abuse and employ the victims’ resources.
We see that cheaper attack methods have always been on the rise in the region and cybercriminals quickly pick up on new tactics. Kaspersky therefore suggests that in the nearest future, these countries should be prepared for such attacks”, says Maria Garnaeva, Senior Security Researcher at Kaspersky ICS CERT team.
However, the mass scale attacks are not disappearing, but rather transforming. Garnaeva also reports on a mass-scale and pervasive fake installers campaigns, where fake pirated software sites serve up malware as a service.
The scheme is usually the following: a user searches for a free version of an extremely popular legitimate spyware. The cybercriminals are offering them a fake installer using ‘black SEO technic’ – the abuse of the legitimate search engines, resulting in the offering of the fraudulent websites first. As a result of software installer execution, a few dozen malware samples are downloaded and installed with a goal of turning the infected devices into a part of the Glupteba botnet.
The whole fake installers campaign and botnet has been extremely active in South Africa in 2021 and continues to evolve, yet it is scarcely researched.
“While the Glupteba botnet seems to be a threat for consumers, we are still researching it and keeping an eye on its behaviour, since some distributed malware resembles APT-related samples like Lazarus APT groups and were recently used in the largest DDoS attack in Russia.
It is too early to say it with a high level of confidence, but these factors may suggest that we are now entering the era where APT actors start to use existing malware distribution platforms which makes an attribution of such attacks harder and opens a new vector similar to supply chain attacks,” adds Garnaeva.
In order to stay protected from such new cybercrime models and threats, Kaspersky recommends the following:
- Pay close attention to and don’t open any suspicious files or attachments received from unknown sources.
- Do not download and install applications from untrusted sources.
- Do not click on any links received from unknown sources and suspicious online advertisements.
- Create strong passwords and don’t forget to change them regularly.
- Always install updates. Some of them may contain critical security issues fixes.
- Ignore messages asking to disable security systems for office software or antivirus software.
- Use a robust security solution appropriate to your system type and devices, such as Kaspersky Internet Security
In a powerful stride towards an inclusive digital future, the National Information Technology Development Agency (NITDA) is spearheading a transformative drive to empower Nigerian women in the Artificial Intelligence (AI) and digital economy.
This commitment was resoundingly reiterated by NITDA’s Director General, Kashifu Inuwa CCIE, at the “Innovate Her 25” conference, the 10th National Conference and 11th Annual Meeting of Nigerian Women in Information Technology.
Speaking at the event themed “Women in AI: Unlocking Resilience, Fostering Innovation and Leadership,” Inuwa, represented by Dr. Aristotle Onumo, Director of Stakeholder Management and Partnerships, emphasised that true innovation blossoms not in isolation, but through synergistic partnerships and collective endeavor – principles deeply embedded in NITDA’s operational ethos.
Highlighting Nigeria’s Artificial Intelligence (AI) Strategy, Inuwa added that inclusivity is embedded as a core objective: “Our strategic roadmap mandates that at least 40% of our programmes directly benefit women and underserved groups. We have also developed a Gender Inclusion Strategy to guide interventions in areas such as training and infrastructure,” he explained.
Further underscoring Nigeria’s leadership in the digital space, Inuwa excitingly announced that in September 2025, NITDA will proudly host a Leadership Summit on AI. This landmark event will convene stakeholders from across the African continent, fostering a collaborative environment to forge a unified AI vision for Africa.
In alignment with the conference’s focus on empowering women in technology, the DG detailed NITDA’s diverse capacity-building initiatives spanning AI, cloud computing, and cybersecurity. “We work with partners such as the Renew Hope Initiative to train thousands of women across Nigeria’s six geopolitical zones,” he revealed, highlighting the agency’s broad reach.
NITDA stands ready to collaborate with organisations like the Nigerian Women in Information Technology (NIWIT), actively encouraging proposals for bespoke programmes that cater to specific community needs. “We focus on targeted training with measurable outcomes, rather than generic approaches,” Inuwa affirmed, emphasising a results-oriented methodology.
He further spotlighted NITDA’s “Digital Literacy for All Initiative,” which seeks to equip 70% of Nigerians with digital literacy by 2027. Through strategic partnerships with the NYSC and the integration of digital literacy into national school curricula, the agency plans to train over 30 million Nigerians — with a dedicated focus on underserved communities and public servants.
Addressing critical concerns surrounding ethical AI, Inuwa emphasised the importance of developing indigenous datasets and large language models reflective of Nigeria’s unique realities: “We are working closely with stakeholders to build local datasets that safeguard Nigerians’ digital rights and ensure ethical AI use,” he assured.
NITDA is also championing mentorship for women in technology through impactful initiatives such as Women Innovate. The agency warmly welcomes collaboration with NIWIT to design structured mentorship programmes and is open to formalising such partnerships through Memoranda of Understanding (MoUs).
“NITDA is committed to fostering inclusive economic growth through innovation. Partnership and collaboration remain the way forward,” Inuwa declared.
The session concluded with a resounding call to action, urging women-focused organisations to leverage NITDA’s open-door policy and unite in advancing digital inclusion across Nigeria. The future of Nigeria’s digital economy is inclusive, and women are at its forefront.
Amazon’s management on Wednesday said that it expects that artificial intelligence software will reduce the number of office workers at the world’s largest online retailer.
Andy Jassy, chief executive, Amazon
“We will need fewer people doing some of the jobs that are being done today and more people doing other types of jobs,” Andy Jassy, chief executive, Amazon wrote in an email to employees.
He said it was difficult to predict how the overall workforce will evolve, but in the next few years, it is expected that AI efficiency gains will lead to a reduction in the number of office workers.
According to earlier reports, Amazon employed around 1.5 million people worldwide, with approximately 350,000 office employees in various roles.
The Wall Street Journal reported that the company does not anticipate further large-scale layoffs, as seen in 2022 and 2023, in the near future.
Instead, it expects that vacant positions will not be refilled.
However, layoffs are not ruled out, according to sources familiar with the matter.
“Amazon is focusing on so-called AI agents, software capable of independently performing tasks. These agents could, for example, summarise information from the web and data sources, write software, translate languages and automate many time-consuming tasks,” Mr Jassy explained.
“Agents will be teammates that we can call on at various stages of our work,” he added, urging employees to experiment with AI whenever possible.
The impact of AI on the job market has been a concern for many years.
Recently, Spotify, the leader in music streaming, announced that teams requesting additional staff would first need to prove that AI could not perform the tasks.
The creators of the language-learning app Duolingo plan to gradually replace external workers with AI.
Dr Adebowale Adedokun, director-general, Bureau of Public Procurement (BPP), has reaffirmed the bureau’s commitment to data protection in Nigeria.
He disclosed this in a statement at the weekend by Zira Nagga, head of Public Relations, BPP, following a courtesy visit by a delegation from the National Data Protection Commission (NDPC).
Adedokun stressed that data protection is vital to Nigeria’s economy and development, particularly in areas such as demography, health, education, and other key sectors.
He emphasised that no country should leave its data unprotected, as it plays a crucial role in future planning and national development.
“Data governs the world. It is essential to technological progress and must be protected for a country or business to be taken seriously,” he said.
Adedokun described the visit, aimed at fostering partnership on data policy implementation and protection, as timely and aligned with national goals.
He said the BPP would collaborate closely with the NDPC to boost data development, capacity building, and enhance the procurement system.
“The BPP will support compliance as part of the ‘Nigeria First’ Policy, although it is not a core procurement eligibility requirement,” he explained.
He suggested a hybrid training model to help build strong capacity in data protection, privacy awareness, and policy understanding.
According to him, a dynamic training approach will reduce logistics costs and improve public confidence in data safety and privacy.
Dr Vincent Olatunji, CEO, and national commissioner, NDPC, praised Adedokun and the BPP for supporting data protection initiatives.
He said the partnership supports President Bola Tinubu’s vision and will strengthen data privacy across Ministries, Departments, and Agencies (MDAs).
“The collaboration will create awareness and train BPP staff to ensure a firm grasp of data protection principles and policies,” he stated.
Olatunji said the NDPC would establish a working group to finalise a Memorandum of Understanding beneficial to both institutions.
He added that President Tinubu signed the NDPC into law on 12 June 2023 to uphold citizens’ rights and protect national and business data.
Olatunji also noted that strict legal measures were in place to enforce data protection and ensure full compliance nationwide.
Both agencies agreed to form a team to sign the MoU and focus on capacity building and data management in procurement and beyond.
Mafab Gets 0724 Number Series, Launches Mcom 5G Brand
NASRDA, Galaxy Space Firm Sign MoU on Satellite Connectivity
Bank Customers Petition CBN over Illegal Deductions, Demand Action
DBN Awards N13m in Grants to Tech Startups
NCC to Name, Shame Telecom Infrastructure Vandals
News3 days agoLasaco Assurance to Invest in Technologies, Systems to Deliver Value to Clients
E-Financial3 days agoNIBSS National Payment Stack to Transform Nigerian Instant Payments
E-Financial3 days agoCBN Reaffirms Banking Sector Resilience as Forbearance Ends
News2 days agoPalmPay, Glo Launch “Recharge and Win Bonanza 2” with Exciting Prizes
News2 days agoHow and Why N210 Trillion is Missing in NNPCL – CFO
General News2 days agoBridging the Digital Divide: Over 700 Young Africans Empowered by Paradigm Initiative
General News2 days agoIHS Nigeria, United Nations Global Compact Host High-Level Dialogue on Sustainability and Greener Business Practices in Nigeria
General News3 days agoMoniepoint Demonstrates Commitment to Nurturing Africa’s Future Leaders