MICROSOFT WARNS AFRICA UNPREPARED FOR AI CYBER ATTACKS, SAYS NIGERIAN FIRMS MOST AT RISK
Technology giant Microsoft has raised alarm over Africa’s growing vulnerability to sophisticated cyber threats, warning that the continent—particularly Nigeria’s private sector—is ill-prepared for a new wave of artificial intelligence (AI)-driven cyberattacks.
In its 2025 Digital Defence Report, Microsoft revealed that cybercriminals are now using advanced AI tools to refine their attack methods, targeting individuals and organisations with increasing precision. The report described Africa as a “testing ground” for new forms of cybercrime that exploit weak defences and outdated infrastructure.
Kerissa Varma, Microsoft’s Chief Security Advisor for Africa, noted that attackers are “harnessing AI to craft phishing messages in local languages, impersonate trusted individuals, and manipulate the very systems businesses rely on.”
According to the report, phishing campaigns powered by AI achieved a 54% click-through rate, nearly five times higher than traditional attacks. The economic impact of cybercrime across Africa surged from $192 million to $484 million in a single year, while the number of recorded victims rose from 35,000 to 87,000.
In Nigeria, the problem is compounded by rapid digitalisation across the financial technology, telecom, and e-commerce sectors. Many businesses, the report stated, still rely on weak authentication systems, outdated software, and a shortage of cybersecurity professionals.
Data theft accounted for 80% of cyber incidents in 2024, while Business Email Compromise (BEC) made up 21% of successful attacks—surpassing ransomware, which stood at 16%.
Microsoft urged organisations across Africa to adopt a zero-trust security framework, deploy multi-factor authentication, and integrate AI-powered monitoring systems. The company also announced that its Secure Future Initiative, a global cybersecurity capacity-building programme, would be expanded to Africa to boost local resilience.
Industry experts have echoed Microsoft’s warning, stressing that cybersecurity must now be treated as a national and corporate priority. Without immediate investment in digital safety, Nigeria’s private sector could face significant reputational, operational, and financial damage.
The report concludes that as Africa’s digital economy continues to grow, governments, businesses, and technology partners must collaborate to build stronger cyber defence systems and prepare for the era of AI-powered threats.
