Africa witnessed a 14% year-on-year increase in spyware detections targeting businesses between 2023 and 2024, according to new data from cybersecurity firm Kaspersky. Spyware, which is designed to secretly monitor user activity and steal data, was just one piece of a growing cybersecurity puzzle in the region. This uptick reflects a broader trend of increasing data theft and malware incidents across both the business (B2B) and consumer (B2C) sectors.
Beyond spyware, password stealers — malware focused on collecting login credentials — rose by 26%. Kaspersky researcher Maher Yamout explained that Africa’s rapid digital transformation, especially the shift to hybrid work and digitized operations, has outpaced cybersecurity investments, leaving many organisations exposed to advanced threats. In the consumer space, rising use of digital financial services combined with low digital literacy has made individuals more vulnerable to cybercriminals.
The scale of the threat is significant. Kaspersky reported over 131 million web-based threats across Africa last year, with Kenya, South Africa, and Morocco among the most targeted nations. Phishing and ransomware remain dominant threats, with 66 million phishing link clicks — 14.8 million of them coming from corporate users. Local (on-device) threats also rose by 4%, especially in countries like Nigeria, which saw a staggering 169% jump.
To mitigate these risks, Yamout emphasized the need for collaboration, cybersecurity training, and digital literacy efforts. He pointed to initiatives like the African Cyber Surge operation as key to strengthening the continent’s cyber resilience. With the cyber landscape evolving rapidly, building a secure digital ecosystem will require proactive investment and coordinated action across governments, businesses, and civil society.
Source: Business day