In Africa’s cyber attacks, tackling Advanced Persistent Threats is crucial


Latest data indicates that $62 billion was spent globally on IT security last year. Despite the heavy investments, companies and governments are continuing to face massive advanced persistent threats. In fact, close to 90% of organizations have active malware and more than half of them are not aware of any intrusions. Public authorities are the most vulnerable to cyber attacks as most African governments are unaware of the chronic dangers and sophisticated tactics used by advanced hackers. Surprisingly, a majority of government and corporate leaders are not even aware of methods employed by the hackers these days. There has been upsurge in cases where vital state and even military secrets obtained illegally by hackers have ended up being sold to other state spying agencies. This has also included crucial economic and commercial intelligence data of high value being shipped to business and state rivals. The young jobless techies and nerds in Africa are said to hack for fun but online crime gangs are after stealing accounts details, passwords and private data to indulge in illegal funds transfers and ATM withdrawals among other damaging activities.

Hackers, some who are as brave as lions, have no fear selling the information they steal to the highest offer. Most IT security practitioners are more concerned with data breach but they ignore advanced persistent threats. What African region has failed to realize is that data breaches happen through the use of advanced persistent threats. Cyber-threats in Africa, studies have shown that there are plenty of dangers posed by social media networks. In two cases reported in South Africa and Nigeria, attackers used information gleaned from Twitter and Facebook respectively to mine more about the organizations targeted. In the case of South Africa, the attacker used information from Twitter where he used information gathered to develop a phishing e-mail that lured employees of the company (I cannot name it for legal reasons) to open an attachment.

When a female staff opened her mails, the malicious application landed on her PC and spread to all other computers within the organization and according to an investigator privy to the case, it was able to figure out what are the valuable data available on the network.  The “vocational” IT Security experts have failed to appreciate that option of relying on antivirus as an all round solution for any organization's security problems is obsolete and inadequate. In the presence of advanced persistent threats, anti- virus solution is worthless. I come from the school of thought that believe cloud computing is more secure than the more vulnerable traditional IT security infrastructure where IT managers manage the challenge alone. Unless you are an amateur IT manager, it is important to work everyday with an assumption that your organization's network could be compromised anytime because it radically changes the whole security scenario mentality.

Comments

Post a Comment

Popular posts from this blog

To secure Africa’s future, there’s need to reduce deforestation’s emissions

African countries are home to some of the world’s top forests cover and in DR Congo, we all know the history of Belgian Congo as the country was known before independence from Belgium and how its vast forests and mineral wealth led to the assassination of Patrice Lumumba. Despite the decreasing forest cover in African countries there is need for continuous fight to better manage the continent environment. Africa is home to some of the most important forests in the world when it comes to ecosystem conservation and biodiversity and countless species found especially in Madagascar, Tanzania, Uganda and Mozambique. The continent and its population have every reason to be proud of their incredible natural forests and species. Therefore, one would expect that the current political and technocratic class would be serious in engineering comprehensive efforts needed to ensure that this centuries old forests can be sustained and enjoyed by future generations as envisaged by th
Read more

SMEs funding problem in Uganda

Ugandan  economy is driven by SMEs and among them are manufacturers who are a priority economic sector  for Uganda to promote inclusive growth. According to data available, there are more than 10,000 manufacturing units in Uganda that can be categorised as micro and small enterprises.These small businesses are an important  source of employment and contribute significantly to the national output .However, small enterprises often find it difficult to access finance from banks and other formal financial institutions.Many of them are unable to provide collateral to secure loans, procedures are too complex for them, or the administrative cost of serving them is too high for banks to consider them as a profitable market.Even Uganda’s most successful companies have their share of cash flow troubles, especially during growth phases.As we all know, profits and cash flow are not the same thing. You can have a profitable business on paper and not have a dollar in the bank.In some seasonal indus
Read more

Social media helping East Africans stay appraised

Social media platforms like Twitter and Facebook have emerged as the new meeting points for criminals in East Africa a trend that has baffled security agencies in the region. While some might think of crime activities as happening in secret locations, social media platforms are helping make such wars more public than ever before. Study conducted recently revealed that youthful criminal members have been making threats and violent statements on Twitter or Facebook and even worse threatening their victims without any fear although most of them use fake identities. I came across this piece that basically describes how even underage trolls do not like the crime occurring over anything meaningful. “A couple of young girls that need to be raped, plus a resistance, plus sex equals tomb material,” Kabena K****** says bluntly. “This is a f***ing 18-year-old a**hole statement.” More of these criminal acts are happening online and much so the authorities in the region have failed to
Read more