Why Nigeria, S’Africa prime cybercrime hit lists – Deimos CTO

Chief Expertise Officer at Deimos, Jaco Nel, speaks with LAOLU AFOLABI about Africa’s rising cyber menace panorama. The CTO of the main hybrid/multi-cloud skilled companies firm specialising in cloud-native growth and safety operations sheds gentle on why Nigeria and South Africa are susceptible to cyberattacks and provides insights into addressing these challenges.

Cyber threats are on the rise throughout Africa, with Nigeria and South Africa rising as major targets. What makes these nations significantly susceptible, and the way do their challenges stack up towards these confronted by different African international locations?

Nigeria and South Africa are significantly susceptible to cyber threats resulting from their financial prominence, excessive web adoption, and fast digital transformation. As two of Africa’s largest economies, they host vital monetary exercise and rely closely on digital platforms, making them prime targets for cybercriminals looking for monetary acquire. Nigeria has an enormous and rising on-line inhabitants, whereas South Africa boasts one of many highest web penetration charges on the continent. This widespread connectivity will increase the assault floor for malicious actors.

Each international locations additionally face challenges with outdated infrastructure and legacy programs, that are extra vulnerable to exploitation. Whereas their fast digital adoption is a power, it additionally leaves gaps in safety preparedness, creating alternatives for stylish menace actors, together with organised cybercrime teams and state-sponsored attackers.

Are you able to share a current real-world instance of a cyberattack that highlights the evolving nature of threats in Africa?

In April 2024, a Nigerian fintech firm skilled a safety breach resulting in unauthorised transfers. Whereas the corporate didn’t disclose the precise quantity, experiences indicated that as much as N11bn (roughly $7m) was compromised. The attackers routed funds by a number of accounts throughout numerous monetary establishments to evade detection, underscoring vulnerabilities within the fintech sector. This particular incident highlights the menace to fintech organisations on the forefront of expertise in Africa.

With African governments imposing stricter information sovereignty legal guidelines, what are the largest safety dangers companies now face?

The push for information localisation, together with rising considerations about privateness and safety, is driving many African nations to introduce particular laws dictating how and the place information needs to be saved and processed. Whereas this shift is essential for safeguarding delicate data, it additionally introduces new safety challenges that companies should navigate.

One of many greatest dangers is that localising information, whether or not in on-premise information centres or native cloud platforms, creates extremely concentrated targets for cybercriminals. The extra information is clustered in native infrastructure, the extra enticing it turns into for assaults, together with ransomware, information breaches, and insider threats. The problem for companies isn’t simply assembly compliance necessities; it’s making certain that the information they’re now required to maintain inside borders is correctly secured towards more and more refined cyber threats.

Regulatory fragmentation is one other rising concern. With totally different international locations implementing their variations of knowledge sovereignty legal guidelines, corporations working throughout a number of markets could battle to create a unified safety technique. The inconsistencies in compliance frameworks may go away companies uncovered to each safety vulnerabilities and potential penalties for non-compliance.

To remain forward, companies might want to rethink their strategy to safety. Investing in stronger cybersecurity frameworks that defend information at relaxation and in transit can be important. Discovering the correct cloud and expertise companions, like Deimos, who perceive Africa’s evolving regulatory atmosphere may even be vital in making certain compliance with out compromising safety. On the similar time, corporations and companies might want to develop contingency plans for information breaches that align with native laws to keep away from expensive penalties.

How ought to Nigerian companies stability compliance with international cybersecurity finest practices to keep away from unintended dangers?

Nigerian companies ought to view compliance with native cybersecurity requirements because the baseline quite than the entire resolution. Compliance ensures adherence to important safety measures, nevertheless it doesn’t assure complete safety. To keep away from unintended dangers, companies want to determine a sturdy safety technique that goes past mere compliance and addresses all elements of their operations.

A powerful safety posture requires satisfactory funding in expert cybersecurity professionals and steady coaching to lift safety consciousness throughout all ranges of the organisation. By fostering a tradition the place safety is a shared accountability, companies can higher anticipate, detect, and reply to threats. Moreover, integrating compliance with a proactive strategy to safety — by common danger assessments, up to date incident response plans, and tailor-made safety measures — ensures that organisations are ready to deal with evolving cyber threats, quite than merely assembly minimal necessities.

Finally, the objective is to construct resilience. Compliance supplies the framework, whereas an adaptable and complete safety technique protects towards the total spectrum of potential threats.

AI-driven cyberattacks are evolving quickly. What are a number of the most alarming methods cybercriminals are utilizing AI to bypass safety defences?

Cybercriminals are now not simply utilizing AI to automate assaults, they’re utilizing it to outthink and outmanoeuvre safety programs in real-time. In 2024, we noticed a surge in AI-powered phishing campaigns, the place attackers leveraged machine studying to craft hyper-personalised messages that would bypass conventional detection strategies. These scams tailored dynamically, making them extremely tough to recognise, even for knowledgeable customers.

Looking forward to 2025, we predict that these assaults will develop into much more refined. Attackers use AI to foretell human behaviour and refine their methods in real-time. Probably the most regarding developments is AI-generated voice deepfakes, which permit cyber criminals to impersonate executives or trusted colleagues with startling accuracy. This could possibly be used to authorise fraudulent transactions, manipulate staff into sharing delicate information, and even disrupt enterprise operations.

Additionally, attackers can now automate the method of gathering data on a goal, utilizing AI to analyse huge quantities of publicly obtainable information to craft extremely convincing and focused assaults. Which means that social engineering efforts will now not be generic; they are going to be uniquely tailor-made to every sufferer, growing their effectiveness.

How can companies proactively defend themselves towards AI-powered phishing and social engineering assaults?

The rise of AI-driven cyberattacks implies that companies should rethink their strategy to safety. The previous strategies of phishing consciousness coaching and primary electronic mail filters are now not sufficient. Attackers at the moment are utilizing AI to create phishing makes an attempt which might be practically indistinguishable from respectable communications. To counter this, companies have to undertake a multi-layered, proactive defence technique.

Probably the most efficient methods we’ve discovered is to deploy AI-powered cybersecurity instruments. These programs use machine studying to analyse behavioural patterns and detect anomalies, flagging doubtlessly malicious exercise earlier than it will probably trigger hurt. Not like conventional safety options that depend on predefined guidelines, AI-based defences constantly study and evolve, making them much better geared up to establish rising threats.

Worker coaching additionally must evolve. Normal phishing simulations are now not sufficient, and employees should perceive how AI is getting used to govern them. Organisations ought to emphasise consciousness round AI-driven impersonation techniques, together with hyper-personalised phishing makes an attempt. Encouraging a tradition of wholesome scepticism, the place staff confirm requests for delicate actions by secondary channels, can assist forestall social engineering assaults. For example, at Deimos, we encourage the constant use of video calls to confirm delicate data.

Moreover, implementing robust id verification protocols is crucial. Multi-factor authentication (MFA) could make it considerably tougher for attackers to realize entry to vital programs, even when they handle to deceive an worker.

The rise of Cybercrime-as-a-Service means even low-level hackers can launch refined assaults. How does this shift the cybersecurity panorama for African companies?

The rising accessibility of cybercrime instruments additionally implies that African companies will face extra frequent and extra refined assaults. Superior persistent threats, as soon as the area of state-sponsored hacking teams, at the moment are obtainable for buy on the darkish internet, permitting even low-level criminals to hold out long-term, stealthy breaches. This makes early detection and fast response extra vital than ever.

To navigate this evolving menace panorama, companies have to shift from a reactive to a proactive cybersecurity strategy. Risk intelligence will play a vital position in figuring out and mitigating dangers earlier than they escalate. Organisations want to observe rising cybercrime tendencies and set up fast response frameworks. Collaborating with trusted safety companions can even assist companies keep forward of latest assault strategies and construct resilience towards an more and more refined cybercriminal ecosystem.

The unlucky actuality is that cyber threats will solely develop into extra automated, scalable, and accessible. For African companies, the problem is now not nearly defending towards skilled hackers; it’s about securing their programs towards a rising military of cybercriminals who now have the instruments to launch devastating assaults on the click on of a button.

We’re seeing a hyperlink between local weather change and cybersecurity dangers. How precisely do cybercriminals exploit pure disasters and infrastructure weaknesses?

As local weather change intensifies, so do the cybersecurity dangers that include it. Pure disasters disrupt infrastructure, weaken safety measures, and go away companies susceptible. Cybercriminals are fast to use these alternatives. When corporations are targeted on bodily restoration, attackers launch ransomware campaigns, phishing scams, and so forth, profiting from the chaos.

Per our prediction at Deimos, we’re anticipating a rise in cyberattacks timed round climate-related disasters. The rising frequency of maximum climate occasions means companies should rethink their cybersecurity methods to account for each bodily and digital threats.

To forestall these dangers, it’s advisable for companies to combine cybersecurity into their catastrophe restoration planning. This consists of investing in climate-resilient infrastructure, making certain backup energy and information safety, and getting ready for cyber threats that would strike when defences are down.

Nigeria has a booming blockchain and DeFi sector. What are the largest safety threats dealing with companies on this house?

Nigeria’s blockchain and DeFi sector has skilled fast progress, unlocking new monetary alternatives and driving innovation. Nonetheless, this growth has additionally made the ecosystem a major goal for cybercriminals. In 2024, hackers exploited vulnerabilities in sensible contracts, decentralised exchanges, and pockets safety, resulting in vital monetary losses. Many companies rushed to undertake blockchain, however the lack of maturity in securing these programs led to vital losses.

As 2025 unfolds, these threats are more likely to develop into extra refined. Decentralised functions (dApps) are increasing past finance into sectors like healthcare and authorities, broadening the assault floor. Weaknesses in sensible contract growth and poor personal key administration stay main dangers, with cybercriminals refining their strategies to breach these programs. With out proactive safety measures, companies within the decentralised financial system face the twin menace of monetary loss and reputational harm.

These dangers name for prioritising safety from the outset. Common sensible contract audits, strong personal key protections, and using multi-signature wallets can assist safeguard digital property. Moreover, educating staff and stakeholders on blockchain safety finest practices can be vital in stopping breaches.

What particular safety measures ought to corporations investing in blockchain applied sciences implement to mitigate dangers?

Corporations investing in blockchain applied sciences should emphasise safe key administration, least privilege entry, and strong observability to mitigate dangers, together with insider threats. Personal key administration is vital to defending blockchain property. Companies ought to undertake safe storage options like {hardware} safety modules (HSMs), multi-signature wallets, and encrypted vaults. Multi-factor authentication should be enforced for key entry, and groups ought to obtain common coaching on safe dealing with to stop phishing and social engineering assaults.

Least privilege entry is crucial for decreasing the chance of breaches and misuse. Function-based entry management (RBAC) ensures that people solely have entry to the sources mandatory for his or her particular roles. Entry ranges needs to be reviewed and adjusted usually to align with modifications in tasks, and id and entry administration (IAM) instruments can automate workflows to scale back misconfigurations. Limiting administrative privileges to solely a small variety of trusted customers is essential, significantly for vital blockchain programs.

To detect and reply to threats proactively, corporations ought to implement superior observability and anomaly detection instruments. These programs can monitor blockchain transactions, consumer exercise, and infrastructure for uncommon patterns or behaviours that would point out safety incidents or insider threats. Coupling real-time monitoring with automated alerts permits swift responses to anomalies. Complete logging, auditing, and periodic evaluations additional improve accountability and transparency, making certain companies can detect and mitigate dangers earlier than they escalate.

What are the largest misconceptions companies have about cybersecurity, and what are the highest three actions they need to take instantly?

One of many greatest misconceptions companies have about cybersecurity is that cyberattacks solely goal massive firms or extremely delicate industries. In actuality, attackers are more and more shifting their focus to small and medium-sized companies, significantly in rising markets like Africa, the place cybersecurity measures are sometimes weaker. Companies that assume they’re too small to be focused danger leaving themselves susceptible to ransomware, phishing scams, and different cyber threats.

When it comes to the highest three quick actions, companies should first undertake a proactive cybersecurity technique with real-time menace monitoring and fast response plans.

Subsequent, worker coaching ought to evolve to give attention to figuring out threats like hyper-realistic phishing, deepfakes, and social engineering, making cybersecurity a company-wide precedence.

Lastly, companies ought to strengthen their infrastructure by securing cloud environments, auditing sensible contracts, and implementing multi-factor authentication (MFA). With years of experience in cloud-native infrastructure and cybersecurity, Deimos is well-positioned to assist companies by all these actions.

Wanting past 2025, what rising cybersecurity threats ought to African companies begin getting ready for?

Wanting past 2025, African companies ought to start getting ready for more and more refined cybersecurity threats pushed by developments in synthetic intelligence. One main concern is the utilisation of AI in social engineering assaults. Risk actors are leveraging AI to craft extremely personalised and convincing phishing emails, texts, and voice messages, making it tougher for people to distinguish between respectable communications and malicious ones. Spear phishing campaigns, specifically, are anticipated to develop extra exact and efficient, concentrating on key people inside organisations to realize entry to vital programs.

Deepfakes and AI-driven impersonation are additionally poised to develop into vital threats. With AI-generated movies and audio changing into extra convincing, attackers can impersonate executives, staff, and even trusted companions to govern victims into transferring funds, disclosing delicate data, or executing unauthorised actions. Companies should put together to confirm communications by unbiased channels and implement superior detection mechanisms to counter these dangers.

Moreover, AI-powered malware and automatic assaults will escalate, enabling cybercriminals to launch quicker, extra focused campaigns with minimal effort. African companies should spend money on AI-driven defensive instruments able to detecting anomalies and responding to threats in real-time. Proactive measures, equivalent to worker coaching on figuring out AI-enhanced threats, multi-factor authentication, and strict verification protocols, can be important to staying forward of those rising dangers. Getting ready now will allow organisations to adapt to the quickly evolving cybersecurity panorama.