Organized by Ivory Coast’s Telecommunications/ICT Regulatory Authority (ARTCI), the conference aimed to establish a shared vision on several key issues, including personal data governance, cybersecurity, and the regulation of emerging technologies such as artificial intelligence.

At the conclusion of the discussions, participants adopted a declaration calling on African governments to treat data protection as a strategic pillar of digital sovereignty. Regulators emphasized that the issue now goes beyond administrative or legal considerations and should be integrated into the continent’s broader digital development agenda.

Key recommendations include strengthening the capacities of national data protection authorities, enhancing cooperation among African countries, and introducing stricter compliance requirements for both public institutions and private-sector organizations.

Participants also highlighted the need to modernize regulatory frameworks to keep pace with the rapid growth of digital financial services, biometric technologies, international platforms, and AI-driven applications.

This initiative comes at a time when many African countries are accelerating their digital transformation through the deployment of e-government services, electronic payment solutions, and digital identity systems. However, regulators warned that this rapid digitalization also increases exposure to cyberattacks, misuse of personal data, and growing dependence on foreign technology platforms.

Beyond regulatory concerns, African governments are also focused on securing the long-term growth of the continent’s digital economy. According to estimates from the African Continental Free Trade Area (AfCFTA), Africa’s digital economy could reach $721 billion by 2050 if investments and digitalization efforts continue at scale.

In this context, data protection authorities now view digital trust and the security of personal information as essential foundations for the expansion of e-commerce, digital financial services, and public digital platforms across Africa.

The post Cybersecurity, AI and Data: Africa Sets Its Digital Roadmap Through 2030 appeared first on .

In August alone, 60 Chinese nationals were among more than 100 individuals deported from Nigeria after being convicted of cyberterrorism and internet fraud. According to the Economic and Financial Crimes Commission (EFCC), many of those convicted were involved in online romance scams designed to lure victims into investing in fraudulent cryptocurrency schemes.

“The fight against cybercrime is being pursued with renewed intensity, and we are working closely with international partners to dismantle these networks,” the EFCC said following further arrests in February.

In its prosecutions, the agency has argued that cybercrime poses a direct threat to Nigeria’s economic stability and social fabric.

The phenomenon is not limited to Nigeria. In recent years, dozens of additional Chinese nationals have been deported or imprisoned across Africa for cyber-related offenses, reflecting a pattern that has taken root on the continent.

In 2024, Angolan authorities arrested 46 Chinese nationals who were operating an illegal online casino from a hotel in Luanda, targeting players in Nigeria and Brazil. A year earlier, nine Chinese nationals were among fourteen suspects arrested in Namibia for running a “pork butchering” scam—an online fraud scheme that uses fabricated identities to entice victims into purchasing fake cryptocurrencies. The suspects were also charged with money laundering and human trafficking.

Zambia has likewise dismantled what the government described as a “sophisticated internet fraud network” involving 22 Chinese nationals who targeted victims via mobile phones and online platforms in Peru, Singapore, several African countries, and the United Arab Emirates.

Despite these cases, Nigeria remains the epicenter of Chinese-linked cybercrime operations in Africa. In late 2024 and early 2025, nearly 1,000 suspects—including 177 Chinese nationals—were arrested during coordinated raids in Abuja and Lagos.

Nigeria’s prolonged economic challenges have further complicated the fight against cybercrime. Inflation exceeding 30 percent, rising unemployment, and mounting public debt have strained state capacity and undermined public trust, according to Nigeria’s 2025 budget and economic outlook published by PricewaterhouseCoopers.

Authorities say the dismantled cybercrime rings were structured like legitimate corporations. Raided facilities contained rows of computers, thousands of smartphone SIM cards, and training programs for Nigerians recruited to carry out online scams.

The United Nations Office on Drugs and Crime (UNODC) has warned that Africa has increasingly become a refuge for Chinese and other cybercriminal groups displaced by government crackdowns in Southeast Asia.

Interpol’s Africa Cyberthreat Assessment Report 2025 underscores the scale of the challenge. Two-thirds of African member states surveyed said cybercrime accounts for a medium to high proportion of overall crime. In West and East Africa, cyber offenses represent roughly 30 percent of all reported crimes.

Interpol attributes growing vulnerability in part to the widespread adoption of smartphones, while noting that many African countries are still developing legal frameworks to combat cybercrime and have invested less in cybersecurity than other regions. Gaps in digital literacy further exacerbate the threat, particularly as mobile banking services continue to expand.

“Scammers rely heavily on social engineering techniques to compromise accounts and extract emergency funds from unsuspecting victims,” Interpol investigators wrote, noting that victims are often manipulated into revealing passwords and sensitive personal information.

Following late-2024 raids that led to the arrest of 148 Chinese nationals among nearly 800 suspects, EFCC Chairman Ola Olukoyede said the operations demonstrated Nigeria’s resolve.

“Foreign nationals exploit Nigeria’s negative reputation—often perceived as a haven for fraudsters—to establish themselves and conceal their heinous criminal activities,” Olukoyede said. “These arrests send a clear message that Nigeria is taking the fight against cybercrime seriously.”

The post Nigeria, the epicenter of Chinese cyber scams appeared first on .

2FA: Useful, but Vulnerable

Two-factor authentication adds an extra layer of security to online accounts: in addition to a password, users must confirm their login using a code sent via SMS, email, or an authentication app. This significantly complicates attackers’ efforts, even if login credentials are compromised.

However, cybercriminals have devised multiple ways to circumvent 2FA. Some intercept authentication codes using AI-powered bots, while others rely on screen pixel analysis techniques to capture sensitive data in real time.

Session Cookies: The Hackers’ New Target

A tool known as Evilginx is increasingly being used to carry out these attacks. According to researchers at Infoblox, Evilginx is an advanced open-source phishing framework specializing in adversary-in-the-middle attacks. In practice, it places itself between the victim and a legitimate website—whether a bank, social media platform, or financial service.

To launch the attack, hackers deploy Evilginx on a server and configure a fake domain. This domain acts as a proxy, forwarding all requests to the official website while intercepting login credentials and, crucially, session cookies.

A session cookie is a temporary file that allows a server to recognize an authenticated user during a browsing session. It is deleted when the user logs out, closes the browser, or when the server-side session expires.

How the Attack Works

The victim receives a malicious link via email, SMS, or social media. Believing it to be legitimate, they open the fake portal, which appears authentic and even displays an HTTPS padlock.
The user enters their username and password, which are instantly forwarded to the real website. The login succeeds normally, but the intermediary portal captures these credentials.
The legitimate site then requests the 2FA code. The victim enters the code, and the malicious portal relays it in real time.
At that moment, the hackers intercept the session cookie generated after authentication. Copied by Evilginx before being passed to the victim’s browser, this cookie allows attackers to access the account without a password or 2FA code.
Using the stolen cookie, hackers can read emails, modify security settings, carry out financial transactions, or extract sensitive data—until the cookie expires or is revoked.

An Invisible Attack

From the user’s perspective, nothing seems out of the ordinary. The experience mirrors a normal login on the real website. The breach is often discovered only after fraudulent transactions occur or account settings are altered. The entire intrusion relies on the invisible duplication of the session cookie.

How to Protect Yourself Against Evilginx and 2FA Bypass Attacks

To reduce the risk:

• Be cautious with unexpected links and always verify the sender and destination before clicking.
• Use phishing-resistant multi-factor authentication methods, such as physical security keys (e.g., YubiKey).
• Revoke all active sessions and log in again using your password and 2FA to generate new session cookies, rendering stolen cookies useless.

These simple steps can significantly reduce exposure to a sophisticated yet stealthy threat.

The Bottom Line

Two-factor authentication remains a critical tool for securing online accounts, but it is no longer infallible in the face of increasingly advanced attacks such as those leveraging Evilginx. Vigilance, strong security practices, and the adoption of phishing-resistant authentication methods are now essential. Protecting digital data is no longer just about passwords—it’s a strategic game where every click matters.

The post As Security Improves, Hackers Adapt: The New Face of Two-Factor Authentication Attacks appeared first on .