Nigeria and South Africa Face Surge in Cyberattacks Amid Ransomware Threats

Techeconomy.Ng

Nigeria and South Africa Face Surge in Cyberattacks Amid Ransomware Threats

First seen 15 Aug 2026, 02:19 UTC • •67.0

Article Content

1 / 7

Browse articles

ThreatCluster •August 16, 2026 at 01:02 UTC

•Nigeria averaged 4,975 cyberattacks per organization weekly in July 2026.
•South Africa accounted for 92% of Africa's ransomware detections, highlighting its vulnerability.
•Cybercrime losses in Africa have surged to $484 million, driven by AI-enabled attacks.

In July 2026, Nigeria recorded an alarming average of 4,975 cyberattacks per organization weekly, marking an 87% surge in ransomware incidents. This data, reported by Check Point Research, places Nigeria among the most targeted countries globally. South Africa has emerged as a significant target, accounting for 92% of Africa's ransomware detections and 40% of phishing incidents. The Interpol report highlights that cybercrime in Africa has evolved into an industrialized ecosystem, with financial losses doubling to $484 million since 2024. The rise in attacks is attributed to the increasing use of AI tools by cybercriminals, which automate various stages of cyberattacks. Key sectors affected include Financial Services, Government, and Energy. The report emphasizes the urgent need for AI-driven security measures to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 57d ago How this analysis works

Timeline

2026-07-01

Nigeria's cyberattack statistics released

Check Point Research reported an average of 4,975 cyberattacks per organization weekly in Nigeria for July 2026.

2026-08-05

Interpol's Cyberthreat Assessment Report published

The report revealed South Africa's dominance in ransomware and phishing attacks across Africa.

english.news.cn

2026-08-13

Check Point Research report highlights ransomware surge

The report noted an 87% increase in ransomware attacks in Nigeria, with significant implications for various sectors.

More articles in this cluster (6)

Threat Graph

8 entities, 13 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
Phishing
Ransomware
T1566 - Phishing

Organization (1)

Education

Malware (1)

DeadLock

Threat Actor (2)

Qilin
The Gentlemen

Relationships

Qilin uses DeadLock
The Gentlemen uses DeadLock
Qilin uses Data Breach
Qilin uses Phishing
Qilin uses Ransomware
Qilin uses T1566 - Phishing
The Gentlemen uses Data Breach
The Gentlemen uses Phishing
The Gentlemen uses Ransomware
The Gentlemen uses T1566 - Phishing
Qilin targets Education
The Gentlemen targets Education
DeadLock targets Education

Following this threat?

Track Qilin, DeadLock and Education in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Ransomware Groups Exploit Palo Alto VPN Vulnerability CVE-2026-0257 Ransomware groups, including Qilin and Settra, are exploiting a high-severity vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access products. This authentication bypass flaw allows attackers to create unauthorized VPN sessions, posing significant detection challenges as their…

CISA Adds Multiple Exploited Flaws in AI and Networking Tools to KEV Catalog On September 11, 2026, CISA added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. These vulnerabilities include CVE-2026-42016, which has a CVSS score of 8.1. This update follows the addition of…