The persistent myth is that cybercrime only targets the biggest companies and economies but cyber-criminals are not bound by geography, and rapidly digitising economies lure them in large numbers. South Africa is a prime example: even though it ranks 38th among major economies according to worlddata.info, several reports place it among the nations with the highest cybercrime density, especially in terms of victim numbers.
Chief Technology Officer at cyber-security company, Performanta, Gerhard Swart said this unfortunate distinction means South African organisations need to think more seriously about cyber risks and how to create a cyber-safe business.
“Organisations in South Africa are definitely becoming more aware of cyber-risks. The country is rapidly digitising. Cloud adoption is at record levels, and more digital companies are opening offices in South Africa especially as they look at entering the rest of the African continent. Connectivity and broadband are exploding. In 2023, the 2Africa submarine cable landed in SA, joining the seven other major international cables already here. All that progress attracts cybercrime and local businesses must counter that risk,” he said.
Keeping an eye on trends is crucial. According to Swart, there are five trends that will stand out during 2024:
Generative AI will play a major role in cybercrime and cyber-security
Generative artificial intelligence only entered the public mainstream in 2023, but it's already a dominating topic at South African organisations. The KPMG 2023 CEO Outlook Survey reported that 84 percent of local CEOs consider the technology a double-edged sword: very useful but also full of risks.
“Cyber-criminals are using generative AI to rapidly scale and iterate scams such as phishing, business email compromises, and more sophisticated deep-faked audio and videos. These tactics will grow significantly in 2024 and are of particular concern to South African users who are frequently targeted by such scam attacks. But there is good news, cyber-security vendors are starting to include generative AI to improve reporting and visibility, and reduce demand on security staff,” said Swart.
Escalating attacks target local digital literacy gaps
Digital literacy is the best cybercrime deterrent because it makes it much harder for criminals to fool us. However, a deficiency in digital literacy makes people much easier and softer targets. Using a phone or computer is not enough - digital literacy means accessing, managing, understanding, integrating, and communicating digitally. South Africa's large digital divide, which excludes many people from becoming more digitally capable, will feed high local cybercrime rates.
“The digital divide is a big concern in South Africa. We've made strides in spreading connectivity and the market caters devices for all price brackets. But many people are still barely digitally functional due to high costs and few avenues to help improve their grasp on technology. Artificial intelligence is likely to make this gap even bigger, and there will be more cybercrime as a consequence,” he added.
Greater focus on phishing and stealing tokens
Multi-factor authentication (MFA) is a very potent way to block cyberattacks. MFA security requires users to enter tokens, such as a PIN code, a unique link, or approval through an authentication app -creating two or more steps that criminals must intercept. But those criminals are savvy to MFA, and there has been a rise in attempts to steal MFA tokens. 2024 is likely to see a big jump in these attacks.
“Tactics to intercept or disable MFA security are getting better. There were already some interesting token-based attacks in 2023, and in 2024, we'll see how much those criminal tools have improved. But this doesn't invalidate MFA. Rather, it shows MFA must be part of a security culture built on good training and awareness,” Swart said.
Remote working prompts better security hygiene
For decades, IT environments were centralised and surrounded by walls of security, but as connectivity, the cloud, and the data era expanded, IT operations became more decentralised, which made them more vulnerable to cyber-attacks. Remote and hybrid working amplifies this issue even further, especially since work-from-home employees lack sufficient security training and equipment.
“Hybrid work has many benefits but it's a big cyber risk. Remote-working employees often don't get enough and frequent security training, and they often use personal equipment such as home routers that may have security flaws and are not managed by their company's security people. Criminals are exploiting this deficit, and attacks on remote employees are bound to escalate in 2024 unless companies strengthen their security training and remote-working support,” he added.
Increased emphasis on better cloud security
South Africa is Africa's dominant cloud market, with over 60 percent of the continent's data centres. More are in the pipeline, driven by strong cloud adoption among enterprises and SMEs that see cloud services as an avenue for resilience. But cloud hosting does not naturally mean better security; though cloud providers often invest deeply in security, cloud users must also do their part - and criminals exploit those that do not.
“Cloud security is a very popular topic in business conversations. Companies know that they need the cloud as part of their technology strategies but there is still confusion around the nature and requirements of cloud security. Some think hosting on a hyperscale public cloud will make them impervious. Others think that because they have a small cloud footprint, they are safe. But neither of those beliefs are true and many companies have learned so the hard way. 2024 seems set to bring more profile to cloud security, both in awareness and in security solutions that focus on cloud risks,” concluded Swart.
Saturday Star