--- title: Africa is not immune to evolving APT techniques | ITWeb description: Advanced persistent threat groups are evolving their techniques to steal private data, warns Kaspersky. image: https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/odiPDbApwqai052Zsv8wiPHmzsgTc_u93cSQHK8ZylG--_JfO2eMcXkOvQkWeTYTFGjxnoekTQWJpxoJTIh8yEg=w816-h428.jpeg --- [![vast.png](https://hubspot.obscuretech.net/hs-fs/hubfs/ObscureLogo-02.png?width=1000&height=354&name=ObscureLogo-02.png "vast.png")](http://www.obscuretech.net) Open main menu Close main menu - [Technology Partners](https://obscuretech-6344971.hs-sites.com/technology-partners) Open the submenu - [BeyondTrust](https://obscuretech-6344971.hs-sites.com/beyondtrust) - [Cybereason](https://obscuretech-6344971.hs-sites.com/cybereason) - [Forescout](https://obscuretech-6344971.hs-sites.com/forescout) - [Gytpol](https://obscuretech-6344971.hs-sites.com/gytpol) - [Netskope](https://obscuretech-6344971.hs-sites.com/netskope) - [OKTA](https://obscuretech-6344971.hs-sites.com/okta) - [OneTrust](https://obscuretech-6344971.hs-sites.com/onetrust) - [Palo Alto Networks](https://obscuretech-6344971.hs-sites.com/palo-alto-networks) - [Pentera](https://obscuretech-6344971.hs-sites.com/pentera) - [Proofpoint](https://obscuretech-6344971.hs-sites.com/proofpoint) - [Radware](https://obscuretech-6344971.hs-sites.com/radware) - [RiskIQ](https://obscuretech-6344971.hs-sites.com/riskiq) - [Rubrik](https://obscuretech-6344971.hs-sites.com/rubrik) - [Splunk](https://obscuretech-6344971.hs-sites.com/splunk) - [Tenable](https://obscuretech-6344971.hs-sites.com/tenable) - [Trend Micro](https://obscuretech-6344971.hs-sites.com/trend-micro) - [Obscure Blog](https://hubspot.obscuretech.net/blog) - [About Us](https://obscuretech-6344971.hs-sites.com/about-us) - [Contact Us](https://obscuretech-6344971.hs-sites.com/contact-us) # Africa is not immune to evolving APT techniques [ITWeb](https://hubspot.obscuretech.net/blog/author/itweb) [Share this blog post on Twitter](https://twitter.com/intent/tweet?text=I+found+this+interesting+blog+post&url=https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/rgevdqpypdvvkjn3) [Share this blog post on Facebook](http://www.facebook.com/share.php?u=https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/rgevdqpypdvvkjn3) [Share this blog post on LinkedIn](http://www.linkedin.com/shareArticle?mini=true&url=https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/rgevdqpypdvvkjn3) ![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/odiPDbApwqai052Zsv8wiPHmzsgTc_u93cSQHK8ZylG--_JfO2eMcXkOvQkWeTYTFGjxnoekTQWJpxoJTIh8yEg=w816-h428.jpeg) ![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/odiPDbApwqai052Zsv8wiPHmzsgTc_u93cSQHK8ZylG--_JfO2eMcXkOvQkWeTYTFGjxnoekTQWJpxoJTIh8yEg.jpeg) Research from Kaspersky revealed an overall decrease in certain malware families and types in sub-Saharan Africa (SSA) in H1 2020: 36% decrease in SA, 26% decrease in Kenya and a 2.7% decrease in Nigeria. However, the company stresses that cyber threat remains rife, and Africa is not immune to the evolving techniques of advanced persistent threats (APTs), as well as the possibility of being a future target of hacking-for-hire threat actor groups. ### Hackers for hire Kaspersky research has found that globally, APT groups are evolving their techniques and are upgrading their toolset to continue stealing private data. In addition, the security company has seen a rise of hackers-for-hire or cyber mercenaries during the first two quarters of 2020. In fact, three cyber mercenary groups have been exposed across the world this year alone. Although this type of activity has only taken place outside of Africa so far, Kaspersky warns that the region may become a focus of these groups in the coming months and businesses and entities need to have an understanding of these emerging threats, along with the threat of APTs. Hackers-for-hire or cyber mercenaries are not always motivated by money like traditional cyber crooks, but often steal private data to monetise it in a different way – usually for the purpose of providing advice or insights, based on the data, to share value of a competitive advantage. “For example, a bank BANK [![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/UC-Wireless-logo_xl-Sep-18-2023-05-27-42-3423-PM.gif)](http://adx.itweb.co.za/adclick.php?bannerid=27012&zoneid=0&source=&dest=http%3A%2F%2Fwww.uc-wireless.com&ismap=) [UC-Wireless is a solutions-based distributor for integrated wireless communications in healthcare, mining, education, hospitality and retail.](http://adx.itweb.co.za/adclick.php?bannerid=27012&zoneid=0&source=&dest=http%3A%2F%2Fwww.uc-wireless.com&ismap=) ![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/adlog-Sep-18-2023-05-26-53-4088-PM.php) might get targeted and have its data analysed to gain an understanding of its market exposure, clients, and back-end systems. A competitor can use that to gain significant benefit. The reality is that in this evolving cyber threat landscape, no company or government institution can consider themselves safe,” the company says. ### Sophisticated techniques In SA, Kenya and Nigeria, APT groups are exploiting the current uncertainty around COVID-19 to steal sensitive information.  In addition, several sophisticated techniques have also emerged that are delivering malware in non-conventional ways. While malware attacks in SA, Kenya and Nigeria decreased overall during the first two quarters of 2020, certain malware types, such as the STOP ransomware, are becoming increasingly popular with certain bad actors. The same applies to financial malware in SA and Nigeria as examples. Although it decreased in these areas, some types of financial malware are growing in popularity thanks to their unique techniques. This highlights the fact that attacks are becoming more targeted at specific companies, in specific regions and for specific purposes. The top industries under attack in Sub-Saharan Africa in H1 2020 include government, education, healthcare, and military. While government and military present compelling - and obvious - targets, education EDUCATION [![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/UC-Wireless-logo_xl-Sep-18-2023-05-27-42-3423-PM.gif)](http://adx.itweb.co.za/adclick.php?bannerid=27015&zoneid=0&source=&dest=http%3A%2F%2Fwww.uc-wireless.com&ismap=) [Critical communication solutions to keep schools safe, on time, informed and focused on learning.](http://adx.itweb.co.za/adclick.php?bannerid=27015&zoneid=0&source=&dest=http%3A%2F%2Fwww.uc-wireless.com&ismap=) ![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/adlog-Sep-18-2023-05-26-43-2736-PM.php) and healthcare are often used as pivot points to gain access ACCESS [![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/SqwidNet-logo_xl-Sep-18-2023-05-27-45-9981-PM.gif)](http://adx.itweb.co.za/adclick.php?bannerid=27044&zoneid=0&source=&dest=https%3A%2F%2Fwww.sqwidnet.com%2F&ismap=) [Driving innovation through IoT. Sqwidnet can give you the tools to bring your ideas to life. Connect with us.](http://adx.itweb.co.za/adclick.php?bannerid=27044&zoneid=0&source=&dest=https%3A%2F%2Fwww.sqwidnet.com%2F&ismap=) ![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/adlog-Sep-18-2023-05-27-49-3535-PM.php) to other institutions. Sometimes, an entity is a victim while other times it is the target. The top three threat actors in these regions in this regard are TransparentTribe, Oilrig, and MuddyWater. The rest of 2020 will likely see APT groups and hacking-for-hire threat actors increase in prominence across the globe, comments Maher Yamout, senior security research, Global Research & Analysis Team at Kaspersky. “We also anticipate that cyber criminals will increase targeted ransomware deployment using different ways," Yamout adds. "These can range from trojanised cracked software to exploitation across the supply chain of the targeted industry. Data breaches will certainly become more commonplace especially as people will continue to work remotely for the foreseeable future while exposing their systems to the Internet without adequate protection,”  While prevention is ideal, detection is critical, he says. “Realistically, no organisation or government department can prevent everything. But if there is an understanding of the technology environment and having the ability to detect any deviation from the baseline, decision-makers will go to great strides in mitigating the risk of compromise and by understanding the threat dynamics, organisations can better protect themselves from evolving cyber attacks.” ### Leave a Comment ## Related Articles [![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/4j_VmNN1UNELF41gEfRiQglFZIriD-0mVdcN5TcNYhpP8SPolyg1RyrQJ9dcoyvgchqu-El5kdap9gNu4ogPN5A=w816-h428.jpeg)](https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/vgzey7jowkwmdjx9) ### [Home affairs to resume smart ID, passport e-services](https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/vgzey7jowkwmdjx9) [ITWeb](https://hubspot.obscuretech.net/blog/author/itweb) [Read More](https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/vgzey7jowkwmdjx9) [![](https://hubspot.obscuretech.net/hubfs/Imported_Blog_Media/RAehJ09AnpmCErq4p580P27rmRhL5Y2UfKy1KKW8pfbELSdEuzwng5MOkz9-DdyosKIwQIYDJuCr-o6u1iZGpRFc=w816-h428.jpeg)](https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/lln14mmjpzrqj6aa) ### [Bank Zero introduces pricing guide, promises financial freedom](https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/lln14mmjpzrqj6aa) [ITWeb](https://hubspot.obscuretech.net/blog/author/itweb) [Read More](https://hubspot.obscuretech.net/blog/office/obscuretechnologies/content/lln14mmjpzrqj6aa) #### About - [Privacy Policy](https://obscuretech-6344971.hs-sites.com/privacy-policy) - [Company Documents](https://obscuretech-6344971.hs-sites.com/company-documents) - [Blog](https://hubspot.obscuretech.net/blog) - [Contact Us](https://obscuretech-6344971.hs-sites.com/contact-us) #### Find Out More - [Training](https://obscuretech-6344971.hs-sites.com/training) - [Vendor](https://obscuretech-6344971.hs-sites.com/technology-partners) [info@obscuretech.net](mailto:info@obscuretech.net) [+27 12 941 2032](tel:0129412032) Block B, Unit 2, Top Floor, Southdowns Office Park, 21 Karee Street, Irene, Centurion, 0157 [Follow us on Facebook](https://www.facebook.com/obscuretech/) [Follow us on LinkedIn](https://www.linkedin.com/company/12905777/) [Follow us on Twitter](https://twitter.com/obscuretechsa) [Follow us on Instagram](https://www.instagram.com/obscuretech) © 2021 Obscure Technology (Pty) Ltd. All Rights Reserved | [Sitemap](https://6344971.hs-sites.com/sitemap.xml?hsLang=en&__hstc=210502475.5967cf61bca4ac22d537b1232075ee66.1623670831025.1623920658176.1624257129041.4&__hssc=210502475.13.1624257129041&__hsfp=933429068) | [Privacy Policy](https://6344971.hs-sites.com/privacy-policy?hsLang=en&__hstc=210502475.5967cf61bca4ac22d537b1232075ee66.1623670831025.1623920658176.1624257129041.4&__hssc=210502475.13.1624257129041&__hsfp=933429068)