In line with the Cybercrimes Act, 2020 (Act 19 of 2020), a Cybercrimes Designated Point of Contact has been established through a collaboration between the CSIR and SAPS. The facility is located at the CSIR in Pretoria. The Act requires all financial and electronic communications service providers to report cybercrimes directly to this designated point of contact, the CSIR said in its 2024/25 annual report.

“As the use of digital systems for communication and online transactions becomes increasingly widespread, so do the risks to the safety and security of user’s personal information. Previously, there was no dedicated mechanism or platform to report cybercrimes. In response, the CSIR developed a secure, web-based reporting platform that allows service providers to report cybercrimes directly to the SAPS Designated Point of Contact, hereby supporting cybercrime investigation and response efforts.”

The tool has been fully developed over the past two years and is ready for deployment in a live environment. It will undergo final testing, security assessments and penetration testing before being rolled out nationally for use by all financial and electronic communications service providers in South Africa, the CSIR said.

The post CSIR develops web-based reporting tool for cybercrimes appeared first on ProtectionWeb.

These activities range from trading stolen data to hacking into corporate networks, giving rise to ‘Malware-as-a-Service (MaaS)’, demonstrating the increasing sophistication, creativity and maturity within the illicit cybercrime market. The business model of blanket spreading malware or ransomware attacks is a profitable form of distribution, making every business a target. And right now, the easiest way in is through your cell phone.

Some statistics give a rough idea of the scope of modern cybercrime: 83% of breaches involve external actors; nearly a quarter of all emails can be classified as malicious or do not engage; cybercrime occurs with an average of 97 cybercrime victims per hour, which means that there is a victim of cybercrime every 37 seconds; hackers attack computers with Internet access every 39 seconds, on average. Statistics predict that cybercrime will cost the global economy more than $20 trillion by 2026.

“Mobile devices serve as a convenient entry point for cybercriminals to obtain passwords, subsequently infiltrating company networks. A significant number of employees utilise their mobile devices to connect to their organisation’s networks, inadvertently providing cybercriminals with the opportunity to access sensitive company information,” explained Zamani Ngidi, Business Unit Manager for M&A and Cyber Solutions at Aon South Africa

Types of mobile cybercrime:

Malicious Apps and Websites – Mobile malware and malicious websites can perform various harmful activities on mobile phones, similar to traditional computers.

Mobile Ransomware – This type of mobile malware encrypts files and demands a ransom for their decryption.

Phishing Attacks – Cyber-attacks commonly begin with phishing emails, but on mobile devices, phishing attacks can occur through various means, including email, SMS messaging and social media platforms.

Man-in-the-Middle (MitM) Attacks – MitM attacks involve intercepting network communications to eavesdrop on or modify transmitted data. Mobile devices are particularly vulnerable to these attacks.

Advanced Jailbreaking and Rooting Techniques – These techniques exploit vulnerabilities in mobile operating systems to gain administrator access, allowing attackers to access more data and cause greater damage.

Device and Operating System (OS) exploits – With mobile devices – like computers – vulnerabilities in the mobile OS or the device itself can be exploited as they often exist below and outside the visibility of the device’s security.

“Mobile devices such as smartphones and tablets carry a plethora of inherent cyber risks, including those from websites, emails and various applications. This exposes users to malware and potential hacking with threat activators looking to gain access to mobile banking apps and company data. Background apps may scan devices, URLs, and Wi-Fi connections, which can lead to exposure to dangerous links across various platforms including social media and games. Despite appearing harmless at first glance, these risks can ultimately lead to the theft of personal information,” Zamani warned.

“To safeguard your device and secure sensitive business information from potential threats, it’s crucial to invest in security measures,” Cybersafe CEO, Macleod Burrill, said, to shield against seemingly innocent yet malicious apps, scan WIFI connections, and block access to malicious URLs which are sent in communications like email, SMS and WhatsApp.

The post Cyber criminals targeting mobile devices appeared first on ProtectionWeb.

Critical sectors such as telecommunications, finance, transportation, energy, education, and healthcare have been affected, highlighting vulnerabilities in systems essential to the economy. Among the notable incidents in the public sector were attacks on the National Health Laboratory Service and Denel, showcasing the growing sophistication and reach of cybercriminals.

The SSA warns that threats to South Africa’s critical information infrastructure are likely to escalate, driven by the nation’s advanced communications systems, its position in the global community, and evolving geopolitical dynamics. These factors make the country an attractive target for malicious actors seeking to exploit vulnerabilities for financial or strategic gain.

To combat these risks, the SSA has intensified collaboration with public and private sector entities. This coordinated approach aims to monitor, detect, and respond to cyber threats, safeguarding the integrity of critical information infrastructure and maintaining national security.

While these efforts are ongoing, the SSA emphasises that the challenges posed by cybercrime will require continued vigilance and adaptation as the digital landscape evolves.

The post South Africa Faces Escalating Cybersecurity Threats to Critical Infrastructure appeared first on ProtectionWeb.