Nigeria has been ranked third in Africa for ransomware threat detections in 2024, with 3,459 incidents recorded, according to the 2025 Africa Cyberthreat Assessment Report released by INTERPOL. The report highlights a sharp rise in ransomware attacks across the continent, reflecting the rapid evolution of cyber-enabled criminal activities targeting Africa’s expanding digital infrastructure.
Egypt and South Africa topped the list with 17,849 and 12,281 ransomware detections respectively, followed by Nigeria and Kenya with 3,030 detections. The report notes that highly digitized economies are the most affected by these cyber threats, with cybercrime now accounting for over 30% of all reported crimes in West and East Africa.
Ransomware attacks in 2024 caused significant financial and operational damage across key sectors including finance, energy, government, and telecommunications. Notable incidents include a $7 million cyber heist at Nigerian fintech company Flutterwave and attacks on government agencies such as Nigeria’s National Bureau of Statistics. Other African countries also suffered major breaches, such as South Africa’s Department of Defence and Telecom Namibia.
The report identifies several prominent ransomware groups active in Africa, including LockBit, known for high-profile attacks on government pension funds, and Hunters International, which targets telecom and financial institutions. These groups often demand ransoms in cryptocurrency and leak sensitive data if demands are not met, causing severe disruptions and loss of public trust.
INTERPOL warns that cybercrime is one of the fastest-growing threats in Africa, urging governments and organizations to strengthen cybersecurity measures and improve law enforcement capabilities. The report underscores the urgent need for coordinated efforts to combat ransomware and other cyber threats as Africa’s digital transformation accelerates.
