Kenya, Zambia and South Africa under cyber attack

Issue 5 2023 Information Security

Liquid C2, a business of Liquid Intelligent Technologies, a pan-African technology group, has revealed that the number of cyberattacks on businesses in Kenya, South Africa, and Zambia increased by 76%. This is according to the latest cyber security report, The Evolving Cyber Security Landscape in Africa 2022.

Featuring research, analysis, and findings across the three countries on the evolving cybersecurity threats present in Africa, the report shows that cyberattacks against all large enterprises ramped up dramatically. Kenyan businesses reported an 82% increase in such attacks, while South African businesses recorded a 62% increase, and Zambian businesses a 62% increase.

“The biggest concern emerging from this report is that companies are saying that they’ve put a lot more cybersecurity controls in place. With threats evolving faster than security systems, companies cannot afford to get complacent,” says David Behr, CEO of Liquid C2. “The report highlights that businesses must be consistently vigilant about the ever-evolving cybercrime landscape and the methods malicious actors use to breach cybersecurity measures. As the report shows, complacency is a luxury no one can afford.”

There are reasons to be optimistic; all the respondents in the report highlighted that they had advanced significantly in their cloud and digital strategies and cybersecurity capabilities. Furthermore, the majority (68%) of the companies interviewed in the research said they had appointed cybersecurity staff members or signed up with a cybersecurity team in the past year.

Partner with experts

Yet, as Behr says, this could prove to be a double-edged sword. The research highlights that over half of all large enterprises in the three countries were victims of a successful cyberattack, with 90% of them being Kenyan businesses. Increasingly sophisticated methods like Cybercrime-as-a-Service (CaaS) are becoming more popular in Africa, meaning businesses can no longer rely on outdated technologies and processes. “It is time they invested in a partner that provides 24/7/365 protection, rapid response, threat intelligence and prevention, compliance and improved business reputation, all designed to cater to the specific needs of businesses.”

The top method of attack used by cybercriminals targeting companies was through email, using phishing or spam attacks (61%), with attacks through compromised passwords following at 48% and data breaches and attacks (44%) being the second and third most common. Furthermore, 61% of the companies included in the research said that the breaches to their operations occurred as a result of remote or hybrid working.

One of the most concerning revelations in the report is that Africa faces a growing 100 000 person gap in the number of certified cybersecurity professionals. Reports estimate that there are only 7000 certified cyber security professionals, or one for every 177 000 people on the continent. However, this number may disguise the true magnitude of the problem as there is no readily available data on the level of investment made by African governments into cybersecurity.

The report underlines the increasing need for companies to invest in cybersecurity measures to avoid reputational damage, financial loss, and potential business interruptions. Additionally, it reinforces how vital it is for organisations to collaborate with trusted third-party managed security services providers (MSSPs) to implement and refine their cybersecurity strategies.

The report can be downloaded via www.securitysa.com/*lc2




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Cybersecurity a challenge in digitalising OT
Kaspersky Information Security Industrial (Industry)
According to a study by Kaspersky and VDC Research on securing operational technology environments, the primary risks are inadequate security measures, insufficient resources allocated to OT cybersecurity, challenges surrounding regulatory compliance, and the complexities of IT/OT integration.

Read more...
Cybersecurity in South Africa
Information Security
According to the Allianz Risk Barometer 2025, cyber incidents, including ransomware attacks, data breaches and IT outages, are now the top global business risk, marking their fourth year at the top.

Read more...
Are AI agents a game-changer?
Information Security
While AI-powered chatbots have been around for a while, AI agents go beyond simple assistants, functioning as self-learning digital operatives that plan, execute, and adapt in real time. These advancements do not just enhance cybercriminal tactics, they may fundamentally change the battlefield.

Read more...
Disaster recovery vs cyber recovery
Information Security
Disaster recovery centres on restoring IT operations following events like natural disasters, hardware failures or accidents, while cyber recovery is specifically tailored to address intentional cyberthreats such as ransomware and data breaches.

Read more...
Back-up securely and restore in seconds
Betatrac Telematic Solutions Editor's Choice Information Security Infrastructure
Betatrac has a solution that enables companies to back-up up to 8 TB of data onto a device and restore it in 30 seconds in an emergency, called Rapid Access Data Recovery (RADR).

Read more...
The rise of AI-powered cybercrime and defence
Information Security News & Events AI & Data Analytics
Check Point Software Technologies launched its inaugural AI Security Report, offering an in-depth exploration of how cybercriminals are weaponising artificial intelligence (AI), alongside strategic insights defenders need to stay ahead.

Read more...
The deepfake crisis is here and now
Information Security Training & Education
Deepfakes are a growing cybersecurity threat that blur the line between reality and fiction. These AI-generated synthetic media have evolved from technological curiosities to sophisticated weapons of digital deception, costing companies upwards of $600 000 each.

Read more...
What does Agentic AI mean for cybersecurity?
Information Security AI & Data Analytics
AI agents will change how we work by scheduling meetings on our behalf and even managing supply chain items. However, without adequate protection, they become soft targets for criminals.

Read more...
Phishing attacks through SVG image files
Kaspersky News & Events Information Security
Kaspersky has detected a new trend: attackers are distributing phishing emails to individual and corporate users with attachments in SVG (Scalable Vector Graphics) files, a format commonly used for storing images.

Read more...