Johannesburg: South African organisations are facing an alarming escalation in cyberattacks, with a recent report revealing an average of 19 incidents per company in the past year. The stark warning, delivered by cybersecurity giant Kaspersky at the 25th Cyber Security Summit South Africa, paints a picture of a digital landscape under relentless assault.
The sheer scale of the threat is staggering. Globally, Kaspersky detected a daily deluge of 467,000 malicious files in 2024, a 14% increase on the previous year. Within South Africa, a worrisome 34.2% of users reported encountering web-borne threats, underscoring the pervasive nature of the danger.
The financial sector, a critical artery of the economy, is particularly vulnerable. Banking and financial malware has surged by 34% compared to 2023, leaving institutions and consumers alike exposed. The rise of password stealers, up 14%, and a dramatic 55% increase in exploit attacks, further highlight the sophisticated tactics employed by cybercriminals.
“We are witnessing a dramatic shift in the modus operandi,” warned Dmitry Berezin, Global Security Solutions Expert at Kaspersky. “Cybercriminals are increasingly focused on maintaining persistent access to compromised systems, enabling them to inflict maximum damage.”
The threat landscape is further complicated by the rapid evolution of the crimeware ecosystem. Attackers are adopting a “multi-platform” approach, adapting their strategies to global trends. The Grandoreiro banking trojan, originating in Latin America, now targets thousands of financial institutions and cryptocurrency wallets across the globe, including those in South Africa, Nigeria, and Mozambique.
The emergence of AI-powered cybercrime is a particularly concerning development. Attackers are leveraging AI to craft sophisticated phishing scams, automate malware development, and launch highly targeted attacks. Coupled with the increasing reliance on cloud-based services, the potential for misconfigurations and data breaches is growing exponentially.
Human error remains a significant vulnerability, with social engineering techniques continuing to exploit weaknesses in human behaviour. Kaspersky is urging businesses to adopt a proactive, intelligence-driven approach to cybersecurity. This includes gathering targeted threat intelligence, implementing advanced security solutions, and investing in comprehensive employee training.
“Decision-makers must have a comprehensive security strategy that combines robust cybersecurity solutions for IT assets, employee education, and acquiring threat intelligence,” Berezin advised. “By integrating intelligence-driven security measures, companies can better protect their assets, customers, and reputation in an increasingly hostile digital landscape.”
In an age where digital threats are evolving at an unprecedented pace, South African organisations must adopt a vigilant and proactive stance to safeguard their data, their customers, and their future.
