This was laid bare in the newly released 2025 Africa Cyberthreat Assessment Report by INTERPOL, which reveals a troubling picture of a continent under siege from complex and well-organised cybercriminals.

The report draws on data submitted by African governments and private sector firms working with INTERPOL. Two-thirds of the countries surveyed admitted that cyber-related offences now make up a medium-to-high portion of their overall crime rate. In parts of West and East Africa, cybercrime accounts for over 30% of all reported criminal incidents.

One of the most jarring findings in the report is the sheer explosion in scam attempts. Countries such as Kenya, Nigeria, and South Africa have reported up to 3,000% increases in scam-related alerts within the last year alone. 

According to Kaspersky, a key contributor to the report, this surge is largely driven by phishing—emails and messages designed to trick users into giving up personal or financial information.

But phishing is just the beginning. The report highlights an increase in ransomware attacks across digitally advanced countries. “Ransomware detections in Africa also rose in 2024, with South Africa and Egypt suffering the highest number, at 17,849 and 12,281 detections respectively, according to data from Trend Micro, followed by other highly digitized economies such as Nigeria (3,459) and Kenya (3,030).”

These attacks are disrupting individuals, businesses, and going after national institutions. Kenya’s Urban Roads Authority was one of the high-profile victims of a breach, while Nigeria’s National Bureau of Statistics suffered an attack on its databases.

Even more disturbing is the rise in Business Email Compromise (BEC) schemes, with West Africa emerging as a hotbed of syndicates such as the notorious Black Axe. These groups operate highly structured fraud networks that have siphoned millions from victims worldwide, often masquerading as legitimate organisations.

Another growing area of concern is digital sextortion. INTERPOL reported a 60% spike in such cases. Criminals often manipulate victims into sharing intimate content or use fake, AI-generated images to extort them. These attacks can be emotionally devastating and difficult to prosecute, especially in societies where victims may be reluctant to report such cases.

INTERPOL’s Cybercrime Director, Neal Jetton, stressed the gravity of the situation. “This fourth edition of the INTERPOL African Cyberthreat Assessment provides a vital snapshot of the current situation, informed by operational intelligence, extensive law enforcement engagement, and strategic private-sector collaboration. It paints a clear picture of a threat landscape in flux, with emerging dangers like AI-driven fraud that demand urgent attention. No single agency or country can face these challenges alone.”

The institutional response, however, is still inadequate. The report notes that 75% of African countries admitted their cybercrime laws and prosecutorial frameworks are outdated or insufficient. Even worse, 95% say they lack the training, tools, and resources to implement the laws that already exist.

Many countries still lack the basics: just 30% have a formal incident reporting system, 29% possess a digital evidence repository, and only 19% maintain a cyberthreat intelligence database. 

This limited capacity seriously affects cross-border investigations and slows down international cooperation. 86% of countries said collaboration with foreign agencies is hampered by red tape and logistical constraints.

Public-private partnerships are another weak link. 89% of countries surveyed said their cooperation with companies that could provide vital data or technical expertise is subpar, mostly due to poor coordination structures or outdated regulations.

With the challenges, however, there are small signs of progress. A growing number of African nations have begun aligning their cybersecurity legislation with global standards. Some have invested in specialised cybercrime units and forensic labs. 

These advances were showcased in INTERPOL-led operations such as Operation Serengeti and Operation Red Card, which led to more than 1,000 arrests and the takedown of hundreds of thousands of malicious networks.

Ambassador Jalel Chelba, acting executive director of AFRIPOL, noted that cybercrime is now a governance issue. “Cybersecurity is not merely a technical issue; it has become a fundamental pillar of stability, peace, and sustainable development in Africa. It directly concerns the digital sovereignty of states, the resilience of our institutions, citizen trust, and the proper functioning of our economies.”

To strengthen Africa’s ability to tackle this rising tide of cyber threats, INTERPOL recommends six immediate priorities: boost regional and international cooperation; run public awareness campaigns; modernise cybercrime laws; upgrade operational infrastructure; adopt advanced investigative technologies; and deepen collaboration with the private sector.

The report forms part of INTERPOL’s African Joint Operation against Cybercrime (AFJOC) programme, supported by the UK Foreign, Commonwealth & Development Office, and it benefits from contributions by global cybersecurity firms like Group-IB, Trend Micro, Bi.Zone, and Kaspersky.

Without urgent, coordinated action across governments, security agencies, and the tech sector, Africa may find itself overwhelmed by a threat that knows no borders and stops at nothing.

The post Scams Up 3,000% as Cybercrime Grips Africa – INTERPOL appeared first on Tech | Business | Economy.

Cyber Monday emerged in 2005 as a continuation of the long weekend shopping starting on Black Friday. Black Friday, named after Thanksgiving, was initially intended for sales and shopping in physical stores, and ‘Cyber Monday’ for the same, but for online stores and ecommerce platforms.

According to a new report by Adobe Analytics, Cyber Monday in the US is expected to remain the year’s biggest shopping day, driving an impressive $11.2billion in spending in the US, increasing 5.1% over last year, versus just 1% growth for Black Friday sales.

Nowadays both dates are practically the same and have no differentiation, not only in terms of purchases and figures, but also in the cyberattacks they receive, and which are related to these ‘shopping’ days.

Absa’s Card Data Analysis Black Friday 2021 report shows that even though Black Friday and Cyber Monday sales in South Africa last year showed an increase of between 15% and 30% when compared to 2020, this was attributed to more people buying instead of individuals spending more.

However, with last year’s supply chain issues resolved, it is expected that Cyber Monday sales and participation will increase exponentially as shoppers flock online to look for deals; online retail stores have already started advertising for Cyber Monday deals, weeks ahead of the actual day on November 28th.

“More online shopping activities over this period means that there are more opportunities for cybercrimes to take place. We can expect an array of shopping-related scams where consumers will not get what they paid for, as well as identity theft, and bank fraud. It is important to recognise the warning signs and take immediate action if local shoppers are to protect themselves and their loved ones,” says Charnie-Lee Adams-Kruger, Country Manager for Southern Africa at Check Point.

Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading provider specialising in cybersecurity worldwide, wants to raise awareness among potential shoppers to be cautious with their Cyber Monday purchases as they ‘stroll online’ for such amazing deals.

For example, South African e-tailer Takealot published a warning last year about fraudulent online scams targeting unsuspecting consumers when it comes to special prices during the Black Friday period.

This year will likely be no different. Another example can be found in the most recent data from Check Point Software referring to Amazon Prime Day. We can see how both the number of pages related to the term ‘amazon’ and phishing attacks using this company as an excuse increased.

Almost 1,900 Amazon-related Web pages were created and 10% of them were fraudulent. Without going any further, last year, in the days leading up to Black Friday, there was a 178% increase in malicious Web stores globally.

And it is not just Web sites that you have to watch out for, phishing is also a big player these days. Recently, Check Point Software published a report on malware in Q3 that reflects how transport and package courier companies are used to impersonate identities and carry out phishing attacks, and where DHL ranks first.

This has a close relationship with Cyber Monday, as many of the purchases are made online and delivered with parcel companies, making it more likely that people will ‘bite’ on a scam.

In order for people to take the necessary precautions when buying their favourite products, Check Point Software would like to provide a series of tips to stay safe whilst participating in this season of shopping and as you start to put favoured purchases in your Cyber Monday shopping carts:

1. Always buy from an authentic and reliable source: the ideal is to look for the link in the search engine that we use for the store from which we want to purchase the product. Clicking on a link sent to potential shoppers by email without knowing its origin could potentially be dangerous.
2. Be alert to similar domains: it is very important to pay attention to the links and domains of the Web pages we enter. Misspellings or misspelled names are a sign of which pages are the originals and which have been created to try to attack users who enter.
3. Offers that seem too good to be true will, in fact, always be too good to actually be true: check several sites to see if the offer is real or not. An unusual discount on a highly demanded product could be a clear indicator that it is a scam.
4. Always look for the padlock: Web sites that have the HTTPS instead of HHTP are the secure and authentic sites. In addition, they will have a padlock in front of them to distinguish them from the others. We should only enter these since they are the ones that comply with international security standards.
5. Have security solutions for endpoints: you should also have such security solutions for your e-mail. With this measure many cyberattacks and information leaks can be prevented.
6. Always be on the lookout for password reset emails: especially when the volume of online traffic is at its peak, such as on Cyber Monday. If you receive an uninvited password reset email, always visit the Web site directly (do not click on the links) and change your password.

“Cyber Monday is a great opportunity for many people to get services and products they need at a great discount, although they should also be on the alert to cyber scams, phishing and specially discounted offers”, says Charnie-Lee Adams-Kruger, Country Manager for Southern Africa at Check Point Software. “In this type of online offer these days, many cybercriminals try to impersonate companies involved in such specials, such as delivery companies or stores. You need to continue to practise vigilance so as not to fall for the scams online, even as you enjoy shopping.”

The post Beware this Cyber Monday: Shopping Securely Online as You Grab Best Deals appeared first on Tech | Business | Economy.

The report highlights the brands which were most frequently imitated by criminals in their attempts to steal individuals’ personal information or payment credentials during October, November and December.

For the first time, DHL took the number one spot in Q4, replacing Microsoft as the brand most likely to be targeted by cybercriminals in phishing scams.

Twenty-three percent of all brand phishing attempts were related to the global logistics and shipping company, up from just 9% in Q3, as threat actors sought to take advantage of vulnerable online consumers during the busiest retail period of the year.

Microsoft, which yet again led the rankings in Q3 by accounting for 29% of all phishing attempts, only accounted for 20% of phishing scams in Q4.

FedEx also appeared in the top ten list for the first time in Q4 2021, no doubt the result of threat actors trying to target vulnerable online shoppers in the run-up to the festive season as the pandemic remained a key concern.

The Q4 report also reinforces an emerging trend from Q3, with social media seeming to solidify its position among the top three sectors imitated in phishing attempts.

While Facebook has dropped out of the top ten brands most likely to be imitated, WhatsApp has moved from 6th position to 3rd, now accounting for 11% of all phishing attempts. LinkedIn has moved from 8th position to 5th, now accounting for 8% of all phishing-related attacks.

“It’s important to remember that cybercriminals are opportunists first and foremost. In their attempts to steal peoples’ personal data or deploy malware onto a user’s machine, criminal groups will often take advantage of consumer trends by imitating popular brands,” said Omer Dembinsky, data research group manager at Check Point Software. “This quarter, for the first time, we’ve seen global logistics company DHL top the rankings as the most likely brand to be imitated, presumably to capitalize on the soaring number of new and potentially vulnerable online shoppers during the year’s busiest retail period. Older users in particular, who are less likely to be as technologically savvy as younger generations, will be shopping online for the first time and might not know what to look for when it comes to things like delivery confirmation emails or tracking updates.”

Omer continued, “Q4 has also confirmed what many of us were expecting. That social media would continue to be heavily targeted by bad actors looking to take advantage of those leaning more heavily on channels like WhatsApp, Facebook and LinkedIn as a result of remote working and other fallouts from the pandemic.

Unfortunately, there’s only so much brands like DHL, Microsoft and WhatsApp – which represent the top 3 most imitated brands in Q4 – can do to combat phishing attempts. It’s all too easy for the human element to overlook things like misspelt domains, typos, incorrect dates or other suspicious details, and that’s what opens the door to further damage.  We’d urge all users to be very mindful of these details when dealing with the likes of DHL in the coming months.”

In a brand phishing attack, criminals try to imitate the official website of a well-known brand by using a similar domain name or URL and web-page design to the genuine site.

The link to the fake website can be sent to targeted individuals by email or text message, a user can be redirected during web browsing, or it may be triggered from a fraudulent mobile application.

The fake website often contains a form intended to steal users’ credentials, payment details or other personal information.

Top phishing brands in Q4 2021

Below are the top brands ranked by their overall appearance in brand phishing attempts:

1. DHL (related to 23% of all phishing attacks globally)
2. Microsoft (20%)
3. WhatsApp (11%)
4. Google (10%)
5. LinkedIn (8%)
6. Amazon (4%)
7. FedEx (3%)
8. Roblox (3%)
9. Paypal (2%)
10. Apple (2%)

PayPal Phishing Email – Account Theft Example

During November sales days, we noticed a malicious phishing email that was allegedly sent by PayPal and was trying to steal users’ credit information. The email (see Figure 1) which was sent from the spoofed address PayPal Service (service@ec2-18-156-114-201[.]eu-central-1[.]compute[.]amazonaws[.]com) was actually sent by admin_emotion_dev@emotionstudios[.]rocks, contained the socially engineered subject “[Alert] Confirm your PayPal account (Case ID #XX XXXXXXXXXX)” which could pressure the victim into clicking on the malicious link (https://serviiceds[.]ritaspizzaportsmouth[.]com/llpy/).

The website redirects the user to a fraudulent PayPal login page that looks like the real site (see Figure 2) with a few minor differences in appearance. In the malicious link, the user needed to enter their PayPal account details.

Fedex Phishing Email – Malware Attached

During December, we observed a malicious phishing email that used Fedex’s branding and was trying to get the user to download SnakeKeylogger malware to their machine.

The email (see Figure 1) which was sent from the spoofed address support@fedex[.]com, contained the subject “Bill of Lading-PL/CI/BL-Documents arrival”.

The content is asking to download a RAR archive file “shipment docu..rar”, which contains a malicious executable file that would cause the system to be infected with SnakeKeylogger and could steal the user’s credentials information.

DHL Phishing Email – Credentials Theft Example

In this phishing email (see Figure 1), we see an attempt to steal users’ email and password. It was sent from the spoofed email address DHL Customer Support (info@emmc[.]ir), contained the subject “DHL Shipment Notification : xxxxxxxxxx “Out for delivery” for 15 Dec 21”.

The attacker was trying to lure the victim to click on a malicious link (http://reg[.]chaindaohang[.]com/wp-content/uploads/2021/07/dhl/index[.]php?i=i&0=vegenat@vegenat[.]es) which redirects the user to a fraudulent DHL home page, that looks like the real website (see Figure 2). In the malicious link, the user was prompted to key-in their email and password.

As always, we encourage users to be cautious when divulging personal data and credentials to business applications or websites, and to think twice before opening email attachments or links, especially emails that claim to be from companies such as DHL, Microsoft or Whastapp, as they are the most likely to be impersonated.

The post DHL replaces Microsoft as most imitated brand in phishing attempts in Q4 2021 appeared first on Tech | Business | Economy.