Kaspersky Lab spotlights cybersecurity trends in Africa, the Middle East and Turkey

Kaspersky Lab has shared the evolution of the digital threat landscape in the Middle East, Turkey and Africa (META) and worldwide during its annual Cyber Security Weekend, held in Cape Town, South Africa. Experts from Kaspersky Lab’s Global Research & Analysis Team (GReAT) and featured experts discussed various topics and threats facing organisations and ordinary users nowadays and shared the required steps to stay safe. Particular focus was laid on modern and emerging technologies such as IoT security, blockchain, and industry-specific threats that can have direct impact on business success and longevity.

Highlighted among the information shared was the META threat landscape during the first quarter of 2019. Kaspersky Lab reported more than 150 million malware attacks in Q1 alone, representing an average of 1.6 million attacks per day, and an alarming 108% increase over Q1 2018. With some of the highest mobile phone penetration rates in the world, it is no surprise that the META region also attracts a significant share of malware attacks targeted at mobiles. Mobile malware attacks in META in Q1 2019 numbered more than 368,000, an average of 4,098 per day, and a spike of 118% when compared to Q1 2018.

The META region also faced consistent attacks during Q1 2019 in areas such as crypto-mining malware, phishing and ransomware.

“A drop in ransomware incidents is a great showcase of the security consciousness that is growing in the META region. At the same time, we have to realise that if there are less ransomware attacks, malicious attention is being diverted elsewhere. Personal and organisation-facing financial threats seem to be growing unabated, and we are using Cyber Security Weekend as a platform to strengthen awareness of new and emerging areas of vulnerability,” said Amin Hasbini, Senior security Researcher, Global Research and Analysis Team at Kaspersky Lab.

Calling the continuing need for security awareness and education into clear relief, the Kaspersky Security Network cloud service statistics showed that an average of 27.3% of all users in the META region were affected by web threat incidents during Q1 2019. Saudi Arabia had the highest number of users (35.9%), while Namibia had the lowest (18.5%). Nearly half of all users (average 49.3%) in the META region have reported local threats (such as those spread in local networks, via USB/CD/DVD), with the highest concentration in Kenya (56.8%), and the lowest in South Africa (43.6%).

Users affected by malware in Q1 in META

At a more granular level, Kaspersky Lab revealed the threats faced by individual countries within the META region. This ‘street-level’ view shows that the threat landscape is not always uniform, and that some countries tend to experience more of certain types of threats than others. For instance, the UAE, with a population of 9 million, has experienced 1.1 million instances of phishing and 23 million instances of malware. Even so, from a numbers standpoint, Turkey takes pole position for incidents of phishing (1.24m), malware (39m), and mobile malware (87k).

Kaspersky Lab’s CSW 2019 featured a panel discussion about cyber awareness and cyber education being the key element of building a sustainable protection for any organisation – the human firewall. Baran Erdogan, Founder and CTO of Secure Computing, Turkey, who attended the event as an expert guest, noted that “Two major factors that are changing rapidly, significantly increase the need for cyber awareness. The first factor is that the attack perimeters are evolving. In the past IT centric security was mainly taken into consideration since users had limited access to IT resources from less complex interfaces. But now corporate data is accessed from everywhere including mobile devices and cloud, and any company that is willing to grow and develop, should make these opportunities accessible as much as possible. Second factor is that attack vectors are getting more complex and user centric. Cybercriminals are focusing on employees since it is much easier to penetrate cyber defense measures from inside of a company by leveraging employees without necessary awareness level rather than from outside.”