Phishing remains Africa’s top cyber threat

STAFF WRITER

Data and expert insight collected from different African countries between November 2024 and May 2025 reveal that phishing accounts for 31% of cyber incidents across the  African continent.

This surpasses the global average of 28%. 

Cyber Security Engineer at ESET East Africa,  Allan Juma said phishing scams are a challenge in most of Africa.

“This surge in phishing attacks reflects the growing pains of Africa’s rapid digital transformation. People and businesses are moving online faster than security measures can keep up, creating gaps that cybercriminals are quick to exploit. It’s a perfect storm of opportunity and vulnerability,”Juma said.

He said one of the fastest-growing threats is SMS phishing, where fake text messages impersonate trusted providers to steal PINs or authorize fraudulent transactions.

 “Cybercriminals are exploiting not only technical weaknesses but also gaps in user awareness. These scams are masterclasses in manipulation, preying on trust, urgency, and misinformation with alarming success. To tackle this evolving threat, we need a united effort to educate users and strengthen digital defenses across the continent,”said Juma.

 The ESET Threat Report also highlights the meteoric rise of ClickFix, a once-obscure technique that has quickly evolved into a major global cyber threat. “Between late 2024 and early 2025, ClickFix detections surged by 517%, making it the second most prevalent attack vector after phishing. It now accounts for nearly 8% of all blocked attacks and is one of the fastest-growing threats we’ve ever seen,” said Juma.