E-Business
Spontaneous Deregulation Tests Regulatory Gaps on Digital Platforms

By Austin Okere
There is a perfect storm brewing between Regulators and Technology Platforms. Regulators should ordinarily be one of the most critical enablers of a society.

Austin Okere
They, however, tend to be either a source of support or a headwind against progress. The regulator should not constrict the pursuit of opportunity nor act in a manner to entrench protectionism.
While Nigeria has become one of the world’s fastest-growing technology markets, attracting investments of over $216m in the first quarter of 2021 alone, there is a palpable apprehension among technology start-ups, after a series of regulatory headwinds from different government bodies.
These include the Central bank of Nigeria’s ban on cryptocurrency trading and the Security and Exchanges Commission’s clampdown on technology platforms for purchasing shares in foreign companies outside the Commission’s regulatory purview and registration.
In August 2021, the Central Bank of Nigeria froze the bank accounts of six fintech platforms for 180 days, saying it was investigating “illegal foreign exchange trading”.
“The party’s over: China clamps down on its tech billionaires” was the screaming headline in the Guardian of August 21, 2021. In the article, Vincent Ni reported that Tencent had announced fresh restrictions on the number of time children can spend playing its online games shortly after state media labelled gaming “spiritual opium”.
The major news last October was Alibaba’s fintech spinoff Ant Group suspending its IPO shortly before it went public after high-flying founder Jack Ma expressed dissent against regulators.
In July, the country’s largest ride-hailing company, Didi, became a regulatory target less than 48 hours after it floated in New York. It was ordered to withdraw from app stores and banned from accepting new users pending a review of security risks and data management.
The news wiped $22bn from its market value. Individuals have also been affected.
Last July, Colin Huang, founder of e-commerce platform Pinduoduo, stepped down as chief executive. He later relinquished his chairmanship. In May, Zhang Yiming, boss of TikTok’s parent company, Bytedance, announced his resignation to focus on “reading and daydreaming”.
Further afield in America, the story is not much different. “The Trump-Twitter fight ropes in the rest of Silicon Valley” was the headline on Politico.com on Sunday, May 30, 2020. President Donald Trump tweeted about mail-in voting, alleging without evidence that the effort would lead to voter fraud.
For the first time, Twitter marked the tweet with a small notice that read “Get the facts about mail-in ballots,” which linked to facts-based reporting on the subject. Twitter’s fact-check led Trump to issue an executive order targeting social media companies.
In early June 2021, Nigerian President Muhammadu Buhari announced the indefinite suspension of Twitter after the platform deleted one of his tweets and temporarily suspended his account.
The relationship between platforms and regulation has been thorny right from the start and can at best, be described as a keg of gunpowder waiting to be triggered. Has the time come for the trigger to be pulled?
I wrote this article five years ago in June 2016, and it still captures the essence of this fractious relationship.
I facilitated a seminar for the Lagos Judiciary at the Lagos Business School in May 2016, with the theme Digital Economy and Legal Regulation. The aim of the program was to share insights on the emerging Digital Economy with their Lordships and draw attention to the imperative for regulatory evolution in the face of the pervasiveness of Online Platforms of the kind operated by technology giants such as Facebook, Google, Uber and Airbnb.
There is hardly an area of economic and social interaction these days that is left untouched by these Platforms in some shape or form.
Regulatory Gaps
To fill the regulatory gaps in the digital economy, these behemoths have resorted to what could be referred to as spontaneous deregulation. I first encountered this term in an article by Benjamin Edelman and Damien Geradin and has arisen as a result of digital disrupters ignoring laws and regulations that appear to preclude their business model, which is typically based on providing platforms for crowdsourcing and giving rise to the sharing economy.
Believing in the efficacy of their utility model and its appeal to pent-up global demand, these disrupters seem to see many rules and regulations as belonging to the past and impractical for today’s innovative clime. They therefore simply ignore them, opting for their own version of self-regulation, usually based on a mutual rating system between service providers and consumers.
It is this skirting of existing regulation that is referred to as spontaneous private deregulation.
These disrupters make the rules for themselves as they go along, because in fairness to them, as their platforms reshape markets, the scope of activity subject to regulation tends to decrease, and various forms of protection disappear.
These companies operate in interstitial areas of the law because they present new and fundamentally different issues that were not foreseen when the governing statutes and regulations were enacted.
The major areas in which these digital czars have riled the establishment are in transportation embodied by UBER, hospitality embodied by AirBnB and FINTECHs, with their foray into cryptocurrencies, particularly Bitcoin and Ethereum.
The need for ‘platform fairness’
Axelle Lemaire, French secretary of state in charge of all things digital, insists that France is open to platform operators, but consumers have to be protected. She is sponsoring a law to be passed by the French Parliament which will create the principle of ‘Platform Fairness’.
Karnataka state in India, where Uber piloted its India service two years ago has directed taxi aggregators such as Uber to stop operations in the state until they secure a licence from the government, triggering sharp reactions from the corporate world.
Getting a licence would mean no more surge pricing, complying with the maximum fares fixed by the government periodically and registering with local transport authorities.
The question is why has it taken the Karnataka government such a long time to wake up to regulatory gaps in her transport sector? And how many other cities are in this quagmire?
The U.S Supreme Court recently ended a decade-long battle over Google’s massive book-scanning project, declining to take up an appeal by authors who claimed the company violated copyright law ‘’on an epic scale’’.
The justices denied certiorari in Authors Guild v. Google, 15-849, leaving in place a ruling last year by the U.S. Court of Appeals for the Second Circuit that said Google’s project was permissible. The appeals court decision invoked the ‘’Fair Use’’ doctrine, which permits some ‘’socially beneficial’’ use of published works such as news reporting or research, that would otherwise constitute copyright infringement.
Airbnb has had its fair share of issues with one of her largest markets, New York. A major concern is a legal regime within which Airbnb operates; one that is marked by poorly drafted laws that fail to account for challenges presented by the sharing economy.
As explained by Airbnb cofounder Brian Chesky, “There were laws created for businesses, and there were laws for people. What the sharing economy did was create a third category: people as businesses,” to which the application of existing laws is often unclear.
These new business models raise complex questions that have not yet been addressed by either legislatures or courts.
Because the threat of enforcement actions can have a chilling effect on start-ups and their users, state and local government officials should consider how their actions may affect burgeoning businesses. Officials should encourage the sharing economy’s growth through collaborative efforts rather than seek to protect incumbent businesses.
Until more people think they can successfully start businesses and prosper, we will not have enough jobs in the economy
Regulation seems too slow in catching up
The slow pace of regulation evolution seems to strongly suggest that the legal profession itself is ripe for a technology revolution that will optimise the largely manual and laborious process of enacting laws and regulation in the face of the aggressive pace of digital innovation.
I recall the indignation of their Lordships when I cautioned that the learned profession could be more vulnerable than they think when it comes to disruption. Emerging technologies like cognitive computing and other forms of machine learning can help narrow the gap between regulation and innovation.
Green shoots of technology in Law and Regulation
My take expressed to their Lordships after the seminar was that the digital revolution is like a train whose drivers are the entrepreneur disrupters. The passengers are the global customers with pent-up demand for the value and convenience that Platforms provide.
Staying on the right side of the law in a digital world
Naysayers to this phenomenon can stand in front of the train and be crushed, stay on the platform and be left behind, or come on board for a ride into progressive partnerships. Regulators still have much to learn about how to deal with platforms. They have no choice but to get more involved and get the needed expertise. But will they? The jury is still out.
Austin Okere is the Founder of CWG Plc, & Entrepreneur in Residence at CBS, New York. Austin also serves on the Advisory Board of the Global Business School Network.
E-Business
NITDA Warns Against Fake Google Play Store

National Information Technology Development Agency (NITDA) has issued a public advisory warning Nigerians about a fraudulent website impersonating the Google Play Store.
Mrs Hadiza Umar, head of Corporate Affairs and External Relations at NITDA, made this known on Friday in Abuja.
Umar stated that the fake website was distributing a new malware strain known as the Play Praetor Trojan.
“Cybercriminals are using fraudulent websites designed to mimic the Google Play Store to lure victims into downloading malicious applications,” she said.
She explained that the fake Play Store links were being circulated through various social engineering tactics, including phishing emails, malicious advertisements, and SMS messages.
According to Umar, once the fake application is installed, the Play Praetor Trojan gives attackers unauthorised access to the victim’s device.
“This access can lead to data theft, credential harvesting, financial fraud, remote control of the device, and further malware deployment,” she warned.
She urged the public to download apps only from the official Google Play Store or other trusted sources.
Umar also advised users to verify app developers, read reviews before installation, regularly update their devices and apps to patch vulnerabilities, and use reputable mobile security solutions to detect and block threats.
E-Business
Cyberattacks: ‘56 Percent of Cases Stem from Existing Logins

A new report by Sophos, ybersecurity firm, has said that attackers primarily gained initial network access—56 per cent of all MDR and IR cases—by exploiting external remote services like firewalls and VPNs using valid credentials.
The 2025 Sophos Active Adversary Report details attacker behavior and techniques from over 400 Managed Detection and Response [MDR] and Incident Response [IR] cases in 2024.
According to the report, the combination of external remote services and valid accounts align with the top root causes of attacks.
For the second year in row, compromised credentials were the number one root cause of attacks [41% of cases]. This was followed by exploited vulnerabilities [21.79%] and brute force attacks [21.07%].
When analysing MDR and IR investigations, the Sophos X-Ops team looked specifically at ransomware, data exfiltration, and data extortion cases to identify how fast attackers progressed through the stages of an attack within an organisation.
In those three types of cases, the median time between the start of an attack and exfiltration was only 72.98 hours [3.04 days]. Furthermore, there was only a median of 2.7 hours from exfiltration to attack detection.
“Passive security is no longer enough. While prevention is essential, rapid response is critical. Organisations must actively monitor networks and act swiftly against observed telemetry.
Coordinated attacks by motivated adversaries require a coordinated defense. “For many organisations, that means combining business-specific knowledge with expert-led detection and response.
Our report confirms that organizations with proactive monitoring detect attacks faster and experience better outcomes,” said John Shier, field CISO.
The 2025 Sophos Active Adversary Report further reveals that attackers can move quickly, with a median of just 11 hours between initial access and a breach attempt on Active Directory, a critical asset in Windows environments.
Akira emerged as the most prevalent ransomware group in 2024, followed by Fog and LockBit, the latter still active despite a major takedown.
Attack detection has improved overall, with dwell time—the time attackers remain undetected—dropping from four days to just two, thanks largely to the inclusion of MDR (Managed Detection and Response) cases.
Dwell time varied depending on the type of case: it held steady at 4 days for ransomware and 11.5 days for non-ransomware cases in incident response (IR) investigations.
In contrast, MDR cases showed much faster response times—3 days for ransomware and just 1 day for non-ransom – ware attacks.
The report also highlights that 83% of ransomware deployments occurred outside local business hours, showing attackers favor overnight activity.
Additionally, Remote Desktop Protocol (RDP) was exploited in 84% of cases, making it the most commonly abused Microsoft tool.
To strengthen their cybersecurity posture, Sophos advises organizations to take several key steps.
First, they should close any exposed Remote Desktop Protocol (RDP) ports and implement phishing-resistant multifactor authentication (MFA) wherever feasible to reduce unauthorized access risks.
Additionally, companies should prioritize timely patching of vulnerable systems, especially those exposed to the internet. Deploying Endpoint Detection and Response (EDR) or Managed Detection and Response (MDR) solutions with 24/7 monitoring is crucial.
Finally, having a well-defined incident response plan—and regularly testing it through simulations or tabletop exercises—can greatly improve preparedness for potential attacks.
E-Business
Kaspersky Presents Insight on 14% Increase in Spyware Attacks on Businesses in Africa @ GITEX Africa

As part of the company’s participation at the GITEX Africa conference, taking place in Morocco on 14-16 April 2025, Kaspersky will address the dynamics for cyberthreats in the African region as per the latest anonymised data from the Kaspersky Security Network (KSN)¹.
From 2023 to 2024 businesses in Africa were targeted by web threats, on-device threats, and attacks aiming to steal data, including spyware and password stealers.
Phishing and ransomware continue to be significant threats in the region, with 66 million phishing link clicks seen by Kaspersky in the African region in 2024, including over 14.8 million phishing link clicks by corporate users.
Web-based threats, or online threats, are a category of cybersecurity risks that may cause an undesirable event or action affecting users browsing the Internet.
According to Kaspersky data, there were 131 580 587 web threats detected in 2024 in the African region, including almost 20 million attack attempts in Kenya, almost 17 million in South Africa, and 12.6 million in Morocco. Businesses were targeted by web threats more often in 2024 than in 2023, with threat detections increasing by 1.2%.
Local (on device) threats include malware that is spread via removable USB drives, CDs and DVDs, or that initially makes way onto the computer in non-open form (for example, programs in complex installers, encrypted files, etc.).
According to Kaspersky telemetry, local (on device) threat detections in organisations in the African region in 2024 increased by 4% compared to 2023. Among the countries that saw growth in local threats detected in organisations were Nigeria (169% increase), Ethiopia (86%), South Africa (32%), Senegal (11%), and Morocco (9%).
There has been a spike of threats related to data theft. According to Kaspersky data, there was a 14% growth in spyware attack detections on businesses in the African region from 2023 to 2024.
Spyware is secretly installed on a user’s computer to monitor their actions and collect their data. Apart from that, there has been a 26% increase in password stealer detections. Password stealers are a type of malware designed to harvest login credentials and other sensitive data.
“Our statistics show an increase in attack detections for several types of cyberthreats, and the factors driving these increases are multifaceted. In the B2B sector, the continuing shift toward hybrid work models and the rush to digitise operations — often outpacing cybersecurity investments — may leave businesses in Africa exposed to advanced persistent threats.
In the B2C space, the explosion of digital financial services, coupled with low digital literacy rates, makes individuals prime targets for opportunistic attacks,” comments Maher Yamout, Lead Cybersecurity Researcher with Kaspersky Global Research and Analysis Team.
“Organisations in Africa should prioritise a unified approach by enhancing collaboration, investing in specialised cybersecurity training, and promoting digital literacy to effectively combat the rising tide of cybercrime. Initiatives like the African Cyber Surge operation and targeted educational programs can serve as blueprints for building a resilient digital ecosystem across the continent.”
- E-Business2 days ago
Cyberattacks: ‘56 Percent of Cases Stem from Existing Logins
- News2 days ago
Senate Committee Partners with Kuda Bank to Tackle Compliance Crisis as Nigeria Loses ₦3.4 Trillion
- Broadcasting2 days ago
Subscriber Withdraws Suit against MultiChoice, FCCPC over Price Hike
- E-Business2 days ago
Kaspersky Presents Insight on 14% Increase in Spyware Attacks on Businesses in Africa @ GITEX Africa
- Telecom2 days ago
MTN Plans Second Public Offer in Nigeria
- E-Financial2 days ago
Sterling Bank Reiterates Transfer Fees Removal
- General News2 days ago
OpenAI Sues Elon Musk Claiming Bad-Faith Tactics
- General News2 days ago
FG Unveils e-Visa, Digital Entry Cards to Strengthen Border Security