Nigeria records 4,906 weekly cyberattacks as threats rise 45%

Nigeria reported a staggering 4,906 cyberattacks per organization each week in August 2026, a 45% surge compared to the previous year, placing it among the most targeted markets in Africa, according to Check Point Research. This figure surpassed the global average of 2,422 weekly attacks per organization and was second only to Angola.

Angola recorded 5,416 attacks per organization, a 47% increase year on year, while Kenya reported 3,658 attacks, a 6% rise. South Africa saw a slight decrease of 3%, with 2,086 weekly attacks. Across Africa, organizations faced an average of 3,335 attacks per organization weekly in August, up from 3,237 in July. Globally, the number of weekly attacks stood at 2,422, a 4% month-on-month increase and a 22% rise from August 2025.

The energy and utilities sector, followed by financial services and government institutions, were the most targeted industries in Africa. Check Point Research's regional director for Africa, Lorna Hardie, cautioned that the rising threat level poses a significant risk to national economies. Qilin was the most active ransomware group in August, responsible for 15% of published attacks, followed by The Gentlemen with 10%, with Orova making a debut in the top three.

The trend mirrored the elevated threat level observed in July, when Nigerian organizations averaged 4,975 weekly cyberattacks. The National Computer Emergency Response Team (ngCERT) warned that cybercriminals had orchestrated a coordinated ATM cash-out operation in Senegal, resulting in over $2 million in fraudulent withdrawals through 3,421 ATM transactions.

This method typically involves phishing campaigns, supply chain vulnerabilities, or insider access to deploy malware like Ploutus variants and jackpotting tools. The cybersecurity agency emphasized that although most corporate attacks remain unreported, recent incidents across Africa demonstrate how threat actors infiltrate banking networks before deploying such malware, potentially causing significant financial and operational consequences for affected institutions.