Cybersecurity company Kaspersky has revealed a 14% increase in spyware attacks on African businesses between 2023 and 2024, alongside a 26% rise in password-stealing malware, as cybercriminals escalate data theft efforts across the continent.

The findings, drawn from anonymized Kaspersky Security Network (KSN) data, were presented at the GITEX Africa conference in Morocco (14–16 April 2025), highlighting the urgent need for enhanced cybersecurity measures.

Phishing and ransomware continue to be significant threats in the region, with 66 million phishing link clicks seen by Kaspersky in the African region in 2024, including over 14.8 million phishing link clicks by corporate users.

Web-based attacks reached 131.5 million detections in 2024, with Kenya (20 million attempts), South Africa (17 million), and Morocco (12.6 million) most targeted.

Local on-device threats surged by 4%, led by Nigeria (169% increase), Ethiopia (86%), and South Africa (32%). These include malware spread via USB drives, encrypted files, and compromised installers.

Maher Yamout, Lead Cybersecurity Researcher at Kaspersky, attributes the rise to rapid digitisation outpacing security investments and low digital literacy. “Our statistics show an increase in attack detections for several types of cyberthreats, and the factors driving these increases are multifaceted. In the B2B sector, the continuing shift toward hybrid work models and the rush to digitise operations — often outpacing cybersecurity investments — may leave businesses in Africa exposed to advanced persistent threats. In the B2C space, the explosion of digital financial services, coupled with low digital literacy rates, makes individuals prime targets for opportunistic attacks,” Yamout said.

“Organisations in Africa should prioritise a unified approach by enhancing collaboration, investing in specialised cybersecurity training, and promoting digital literacy to effectively combat the rising tide of cybercrime. Initiatives like the African Cyber Surge operation and targeted educational programmes can serve as blueprints for building a resilient digital ecosystem across the continent.”