The report shows that organisations across the continent now face an average of more than 3 000 attacks per week, with Nigeria recording the highest number among the countries analysed and Ethiopia ranking as the most targeted nation overall.
Speaking to Channel Africa on Thursday, the Head of the Southern African Development Community (SADC) Security Consulting at Check Point Software Technologies, said Nigeria faces more than 4 200 attacks per week per organisation, while South African organisations experience about 2 200. Ethiopia, however, is hit by more than 11 000 weekly attacks per organisation.
De Bruin explained that Ethiopia’s exceptionally high rate is linked to rapid digital transformation. “When organisations move from paper-based processes to digital systems and adopt cloud services, they expand the digital attack surface. Attackers then have a much larger area to exploit,” he said. He emphasised that digital adoption must be accompanied by strong security measures “built into the solutions and the digitisation process itself”.
The report highlights distinct patterns across countries. South Africa has experienced a sharp rise in ransomware attacks, driven by financially motivated criminal groups that increasingly focus on stealing data for extortion. Kenya, meanwhile, has faced attacks on critical infrastructure, which De Bruin said may signal involvement by nation-state actors seeking to cause physical disruption, rather than financial gain.
Looking ahead, the report warns that ransomware will continue to evolve, with attackers prioritising data theft over simple system encryption. AI tools are also accelerating the speed and sophistication of cyber attacks by enabling automated phishing campaigns, fabricated videos and other deceptive content.
De Bruin cautioned consumers to remain vigilant as the festive season approaches, with phishing and smishing attacks expected to spike. He also noted that cyber criminals are already preparing to exploit major sporting events such as the Africa Cup of Nations and next year’s World Cup.
On prevention, he stressed the need for both individual awareness and organisational readiness. Consumers should verify callers, avoid suspicious links and remain alert to scams. Organisations, he said, must adopt a holistic approach that protects not only operational systems but also software development and supply chains.
“Africa’s digital growth brings enormous opportunity,” he said, “but we must secure it properly, or attackers will continue to take advantage.”
–ChannelAfrica–
