West Africa's Cybersecurity Threat Landscape: A Warning from ESET Nigeria

Strategic Insights -

As the global landscape of cyberespionage intensifies, organisations in West Africa are becoming increasingly vulnerable to sophisticated threat actors. According to ESET Nigeria's managing director, Olufemi Ake, the defence, technology, and critical infrastructure sectors are being targeted by cybercriminals, including state-sponsored actors. Ake warns that the region's growing digital interconnectivity, defence collaborations, and emerging tech hubs make it an attractive destination for cyber threats. The company has uncovered a fresh wave of cyberattacks linked to the notorious North Korea-aligned Lazarus Group, which targeted European defence contractors involved in unmanned aerial vehicle (UAV) development and manufacturing.

Key Takeaways:

  • ESET Nigeria has warned that the defence, technology, and critical infrastructure sectors in West Africa are becoming increasingly attractive targets for sophisticated threat actors, including state-sponsored actors.
  • The Lazarus Group, aligned with North Korea, has been linked to a fresh wave of cyberattacks targeting European defence contractors, including those involved in UAV development and manufacturing.
  • ESET researchers identified a mix of social engineering, trojanized GitHub projects, and a remote access tool (RAT) called ScoringMathTea used by the Lazarus Group to gain access to sensitive systems.
  • Olufemi Ake, ESET Nigeria's managing director, has urged organisations to prioritise cybersecurity awareness training as a core part of employee onboarding and operational processes.
  • Ake has identified government agencies, engineering and technology firms, power and telecommunications operators, and financial institutions as sectors at heightened risk due to access to large data pools, strategic infrastructure, or proprietary technologies.
  • Multi-layered protection, including robust endpoint security, advanced threat detection systems, and regular system updates, is necessary to mitigate cyber risks.
  • Educating staff about phishing schemes, fraudulent job offers, and data handling best practices can significantly reduce exposure to threats like Operation DreamJob.
  • West African governments should treat cybersecurity as a national security priority, integrated into the region's economic and digital transformation agendas.

Statistics:

  • The Lazarus Group has been linked to numerous high-profile cyberattacks in recent years, including the 2014 Sony Pictures hack and the 2020 WannaCry ransomware attack.
  • According to ESET researchers, the group's Operation DreamJob campaign targeted several European defence contractors, with suspected goals including the theft of intellectual property, design blueprints, and advanced drone technology.
  • West Africa's growing digital interconnectivity has made it an attractive destination for cybercriminals, with the region's defence collaborations and emerging tech hubs providing potential entry points for threats.

Sources:

  • ESET Nigeria (2023, February)
  • Olufemi Ake, Managing Director, ESET Nigeria (interview)
  • ESET Research Team (2023, February)
  • The Economic Times of Nigeria (2023, February)