E-Business
Report Reveals 28.8% of ICS Computers in Nigeria Attacked with Malware
Kaspersky Security Network (KSN) statistics in the second half of 2023 shows that 28.8% of Industrial Control Systems (ICS) computers in Nigeria were attacked with malware.
This was part of Kaspersky industrial cybersecurity review for the countries in META and outlined the key cybersecurity challenges for industrial enterprises in the year ahead.
According to Kaspersky Security Network (KSN) statistics, in the second half of 2023, 32.6% of ICS computers globally had been attacked with malware.
In the Middle East, Turkiye, and Africa (META) region the figure is 36.5% for Turkiye, 36.8% for Africa (27.5% in South Africa, 34.55% in Kenya, 28.8% in Nigeria), and 33.5% for the Middle East region.
There is a slight decrease in this figure in the region compared to 2022 which can be the result of industrial organisations paying more attention to cybersecurity.
African countries are undergoing rapid digitalisation and integration into the world’s economy, while at the same time facing a significant cybersecurity under-investment problem.
In the second half of 2023, 7.55% of Operational Technology computers in Africa were exposed to threats via USBs (that is 20 times more than the figure of Western Europe); 7.2% faced threat by worms (that is 28 times more than in Australia & New Zealand); and 9.1% of OT computers were exposed to spyware (that is 7.7 times more than the figure for North America).
Kaspersky Industrial Control Systems Cyber Emergency Response Team (ICS CERT) predictions for 2024 highlight the persistence of ransomware threats, rise of cosmopolitical hacktivism, an outlook on the state of “offensive cybersecurity”, and transformative shifts in logistics and transport threats.
Looking back at 2023, Kaspersky predicted the industrial cybersecurity landscape continuing to evolve, with several key trends emerging. The pursuit of efficiency in IIoT and SmartXXX systems fueled an expanded attack surface, while the surge in energy carrier prices led to heightened hardware costs, prompting a strategic shift towards cloud services.
The growing government involvement in industrial processes also introduced fresh risks, including concerns about data leaks due to underqualified employees and insufficient practices for responsible disclosure.
This retrospective analysis lays the groundwork for understanding the cybersecurity landscape faced by industrial enterprises in 2024, such as:
Ransomware targeting high-value entities
Ransomware is projected to persist as the primary concern for industrial enterprises in 2024. Large organisations, unique product suppliers, and major logistics companies face increased risks, with potential severe economic and social consequences. Cybercriminals are expected to target entities capable of substantial ransom payments, causing disruptions in production and delivery.
Cosmopolitical protest hacktivism
Geopolitically motivated hacktivism is forecasted to intensify, presenting more destructive consequences. In addition to country-specific protest movements, the rise of cosmopolitical hacktivism is expected, driven by socio-cultural and macro-economic agendas such as eco-hacktivism. This diversification of motives may contribute to a more complex and challenging threat landscape.
Subtler threats and detection challenges
The use of “offensive cybersecurity” for gathering cyberthreat intelligence is anticipated to have controversial consequences. While it may improve corporate security by providing early signs of potential compromises, the thin line between the grey zone and the shadows may be breached.
Profit-driven cyber activities, armed with commercial and open-source tools, could operate more discreetly, making detection and investigation challenging.
Shifts in threats related to logistics and transport connected to automation and digitisation challenges
The rapid automation and digitisation of logistics and transport are introducing new challenges, intertwining cyber and traditional crimes. This includes theft of vehicles and goods, maritime piracy, and smuggling. Non-targeted cyberattacks may lead to physical consequences, especially in river, sea, truck, and special-purpose vehicles.
“The industrial sector’s cybersecurity is continuously going through significant changes, with both new types of attacks and more sophisticated versions of old ones. Ransomware attacks are still a big problem, and hackers are getting better at targeting large, profitable companies with more advanced methods.
Hacktivists who are motivated by social issues are also becoming more active, adding another layer of complexity to the threats. The transportation and logistics industry is especially vulnerable to these changes because its systems are becoming more and more digital.
This combination of cyber and traditional crime is a serious threat to global supply chains. To protect themselves, organisations need to prioritise cybersecurity and keep improving their defenses,” commented Evgeny Goncharov, head of Kaspersky ICS CERT.
E-Business
Firm Predicts AI, Privacy to Shape Consumer Cybersecurity Landscape in 2025
According to Kaspersky’s latest report, artificial intelligence (AI) will become an integral part of daily life, while privacy concerns around biometric data and advanced technologies will take center stage in 2025. These forecasts are part of the annual Kaspersky Security Bulletin series, which provides an outlook on the cybersecurity trends and threats expected to impact consumers in the coming year.
AI becomes an everyday reality
AI is predicted to fully integrate into daily life in 2025, becoming a standard tool rather than a novel technology. With prominent operating systems like iOS and Android rolling out AI-enhanced features, people will increasingly rely on AI for communication, workflows, and creative tasks.
However, this normalisation also brings challenges, particularly as personalised deepfakes become increasingly sophisticated in the absence of reliable detection tools.
Privacy regulations will expand user data ownership
The growing emphasis on privacy is expected to lead to new regulations that strengthen user control over personal data. By 2025, individuals may gain the right to monetise their data, transfer it easily across platforms, and benefit from simplified consent processes.
Global frameworks, such as the EU’s GDPR, California’s CPRA and South Africa’s POPIA, continue to inspire reforms worldwide, while decentralised storage technologies could further strengthen user autonomy over their information.
Fraudsters will continue to exploit premieres and releases
Cybercriminals are expected to target prominent gaming, console, and film launches in 2025. Titles like Mafia: The Old Country, Civilization VII, and Death Stranding 2, as well as the anticipated Nintendo Switch 2, are likely to attract scams involving fake pre-orders, counterfeit rootkits, and malicious downloads.
Similarly, blockbuster films like Superman and Jurassic World Rebirth may trigger phishing campaigns and counterfeit merchandise fraud aimed at enthusiastic fanbases.
Political polarisation will fuel cyberbullying
Increasing political polarisation is expected to exacerbate cyberbullying in 2025. Social media algorithms that amplify divisive content, combined with the widespread availability of AI tools for creating deepfakes and doctored posts, are likely to intensify online harassment. Cross-border cyberbullying could also escalate as global platforms facilitate the targeting of individuals based on their political beliefs.
Rising number of subscription services will fuel fraud risks
As the global economy shifts further towards subscription-based models, a rise in fraud related to fake subscription promotions is expected. Cybercriminals are expected to create counterfeit services that mimic legitimate platforms, aiming to deceive users into providing personal and financial information, resulting in identity theft and financial losses.
Additionally, the growth of unofficial resources that provide discounted or free access to subscription services is expected to become a significant threat vector, exposing users to phishing attacks, malware, and data breaches.
Prohibition of social media for children may lead to broader user restrictions
Australia’s proposed legislation to ban social media access for children under 16 could set a global precedent. If implemented successfully, the restriction could pave the way for broader limitations on access for other demographics.
Platforms like Instagram have already begun adopting AI-powered age-verification systems, signaling a shift toward stricter governance of online spaces.
“As we look to 2025, the most significant impact on consumers is expected to arise from the intersection of innovation and regulation. Advances in AI, privacy protection, and data ownership frameworks will reshape the way people interact with technology and manage their digital lives.
These developments hold immense potential but also demand careful oversight to ensure they serve consumer interests,” said Anna Larkina, Kaspersky privacy expert.
E-Business
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence (AI) in cyberattacks.
According to the findings, 70% of surveyed companies in the Middle East, Turkiye and Africa (META) region reported a rise in cyber incidents over the past year, with over half of respondents (53%) noting that many of these attacks were likely AI-driven.
The study underscores the reality that AI, which has revolutionised numerous industries, is now also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.
In its latest study titled “Cyber defense & AI: Are you ready to protect your organisation?” Kaspersky gathered the opinions of IT Security and Information Security professionals working for SMEs and Enterprise-level companies regarding new challenges in protecting their organisations against cyberattacks involving the use of AI.
Leveraging AI by cybercriminals is a serious concern for 73% of respondents from the META region. The pressure of this challenge is pushing companies to reassess their cybersecurity strategies and look for solutions that are both proactive and comprehensive.
To effectively tackle AI-amplified threats, businesses in the META region consider regular training to build internal expertise (94%), highly qualified personnel (94%), and relevant external cybersecurity expertise (93%) as the most important factors for protecting their organisations.
They also recognise the importance of having enough staff in their IT teams (91%) and using third-party security solutions (89%).
Despite rising awareness, the study reveals a concerning gap in readiness among many companies.
Over half of the organisations surveyed in the META region lack crucial resources needed to address these sophisticated threats – 56% don’t have the relevant external cybersecurity expertise at their disposal, 51% report that their IT teams are not large enough, 44% lack highly qualified staff, and 45% fall short in regular training efforts.
Additionally, 49% of respondents do not think they have adequate security solutions in place, exposing them to potential vulnerabilities. While most respondents claim to know how to address this lack of resources, the fact remains that they aren’t in place.
“The cybersecurity landscape today mirrors past challenges, with businesses questioning if current solutions suffice. Ransomware, once a primary threat, now demonstrates a dangerous surge, and business decision-makers start questioning the causes of this resurgence.
“The recent hype around AI offers an easy, if not entirely correct explanation. In reality, while using AI to create convincing phishing messages or more effective reconnaissance may be of some help, the root causes are most often more straightforward: cybercriminals have become more organised, better at collaborating, developing innovative attack strategies, and lowering the barriers for less skilled and resourceful attackers.
“So, while it’s useful to keep an eye on AI progress that can enable both attackers and defenders with new options, there are solid strategies companies can – and should – implement immediately.
“Companies should prioritise securing critical IT infrastructure with robust, multi-layered solutions that offer a unified security context. An XDR ecosystem, combined with skilled expertise – whether in-house or through a managed service – can greatly enhance defences.
“Additionally, ongoing employee training, including cybersecurity basics and safe AI practices, adds another critical layer of protection for the organisation,” says Oleg Gorobets, corporate infrastructure protection expert at Kaspersky.
E-Business
Dr. Krishnan Bags Icon of Innovation and Digital Transformation in Africa @ CIO Awards
Dr. Krishnan Ranganath, Regional Executive, West Africa at Africa Data Centres, a seasoned ICT and Telecommunications industry veteran, has been recognized as the “Icon of Innovation and Digital Transformation” at the prestigious CIO & C-Suite Conference & Awards.
The award, presented by Edniesal Consulting Limited, acknowledges Dr Krishnan’s significant contributions to Africa’s rapidly evolving digital landscape.
With over three decades of experience across multiple industries, Dr Krishnan has been instrumental in driving digital innovation and fostering strategic partnerships across the continent. His visionary leadership has been pivotal in addressing Africa’s unique challenges, including limited internet access, affordability, and infrastructure.
“We are honoured to recognize Dr Krishnan for his exceptional achievements. His dedication to innovation and digital transformation has made a profound impact on Africa’s technological landscape,” said Abiola Laseinde, CEO of Edniesal Consulting.
In response to the award, Dr Krishnan expressed gratitude to Africa Data Centres and his team, emphasizing the importance of addressing Africa’s connectivity challenges to unlock the full potential of digital transformation.
This latest recognition adds to Dr. Krishnan’s growing list of accolades, including the Lifetime Achievement Award at Africa’s Beacon of ICT Merit and Leadership Awards and recently the Data Centre Personality of the Year award at the 2024 Tech Innovation Awards (TIA).
- E-Business1 day ago
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
- E-Financial2 days ago
FG Begins N50 Electronic Levy Deductions from Moniepoint, Other Digital Banks
- Telecom2 days ago
Schneider Reiterates Commitment to Accelerate Data Centre Market
- E-Business2 days ago
Mastercard, Alerzo, and e-Trade Alliance Unite to Enhance Financial Inclusion for 10,000 MSMEs
- News2 days ago
IGP Confirms Prosecution of 113 Foreign Nationals for Alleged Cyber Crimes
- E-Business1 day ago
Dr. Krishnan Bags Icon of Innovation and Digital Transformation in Africa @ CIO Awards
- News1 day ago
Oyedele: Majority of Nigerians Approve Tinubu’s Tax Reform Bills
- Telecom1 day ago
SAIL Fellowship: Teachers Reflect on Classroom Transformations with MTN Foundation