Beirut, Lebanon (Enmaeya News) — Africa has experienced a dramatic increase in internet and digital service use in recent years, particularly among its youth, who now make up the continent’s “digital generation.”
But this rapid expansion has brought growing cybersecurity threats, including rising cases of fraud, digital attacks, and efforts to manipulate public opinion. The battle for influence has also moved into cyberspace, resulting in costly and dangerous consequences.
A report published by Al Jazeera’s Centre for Studies, by researcher Mustafa Jali, examined cybersecurity issues across Africa. It focused on four main areas: major cyber threats, measures to strengthen cybersecurity, ongoing challenges, and international stakes.
According to Interpol, more than 160 million new users joined Africa’s digital space between 2019 and 2022. The continent’s digital infrastructure grew alongside this, encompassing banking, e-commerce, and social media platforms. Mobile phones remain the primary internet access point, with an estimated 650 million users, mostly young people who make up 60% of Africa’s population.
As internet use rises, so do financial losses from cybercrime, estimated by Interpol to exceed $4 billion, or 10% of Africa’s GDP. Beyond financial harm, cybercrime disrupts services, erodes public trust in governments, widens the digital divide, and threatens privacy, free expression, and other fundamental rights.
Rising Cyber Threats
Cyberattacks in Africa surged in 2023, with a 23% increase in the average weekly attacks per organization compared to 2022 — the highest rate worldwide. More than two-thirds of African countries rate their cyber risks as moderate to high. Attacks are increasingly organized and sophisticated.
Ransomware attacks — where hackers demand payment to restore access — are among the most dangerous threats. Online fraud is the most common form. One study found that one in 15 organizations faced a ransomware attempt each week in early 2023, double the global average.
Infrastructure such as banks, internet providers, and government services have been frequent targets. Nearly half of African countries reported ransomware attacks on critical infrastructure in 2023, including a notable breach of the African Union’s internal network.
Cyber threats also have a geopolitical dimension. Some nations use cyberattacks to spy on or destabilize African states as part of influence campaigns. Russia, for example, operates digital propaganda networks in support of authoritarian regimes in Mali, Sudan, and Burkina Faso, managing over 175 Facebook pages across 21 countries that spread narratives framing Russia’s war in Ukraine as a Western conspiracy.
Uneven Commitment to Cybersecurity
The 2024 Global Cybersecurity Index ranks only seven African countries as “model” performers with strong cybersecurity commitments. Four countries are at an advanced level, 18 are in the foundational stage, and 21 (nearly 39% of the continent) are still developing. Four countries remain in the earliest stage of cybersecurity development.
Despite challenges, progress is visible. Over a dozen African nations have enacted or updated cybercrime legislation in recent years. In 2023, many created dedicated cybercrime units, increased staffing, and participated in training and awareness campaigns.
Countries like the Democratic Republic of Congo and South Africa have made notable regulatory improvements. Gabon, Cape Verde, and Comoros have advanced legal measures. Ethiopia improved cooperation mechanisms, and Togo showed progress in capacity building. Eswatini, Togo, and the Democratic Republic of Congo report the fastest growth in cybersecurity capabilities.
Regionally, North Africa leads in cybersecurity readiness, while Central Africa lags behind. Organizations like ECOWAS, COMESA, and SADC have introduced cybersecurity laws and policies. The African Union’s Agenda 2063 highlights cybersecurity as a priority, with the 2014 Malabo Convention on Cybersecurity and Personal Data Protection coming into force in 2023 after ratification by 15 countries.
The African Cybersecurity Coordination Centre was established in Lomé in 2022 to boost regional cooperation and strategy development.
Complex Challenges Ahead
Africa’s cybersecurity issues are multifaceted, involving cultural, institutional, financial, technical, legal, and political dimensions.
Cultural barriers include widespread underestimation of cyber risks, with many businesses viewing cybersecurity as secondary. A 2021 survey of 300 sector actors found over half recognize its importance, but fewer than one-third prioritize it.
The continent faces a shortage of cybersecurity experts, limited training programs, and inadequate integration of cybersecurity and artificial intelligence topics in education.
Financial constraints compound the problem. Two-thirds of large African companies surveyed spend less than €20,000 annually on cybersecurity, hindered by a lack of incentives and weak investment in innovation.
To address these challenges, Africa must confront external propaganda campaigns, strengthen defense capabilities, protect digital sovereignty, and enhance international cooperation.
Relevance to Lebanon
Lebanon shares similar cybersecurity challenges as Africa amid rising internet use, especially among youth. Both regions face increasing ransomware attacks, online fraud, and threats to critical infrastructure.
Lebanon also operates in a complex geopolitical environment where cyber threats and digital influence campaigns play a key role. Like Africa, Lebanon grapples with limited cybersecurity expertise, financial constraints, and the need for stronger legal and institutional frameworks.
Lessons from Africa’s progress — such as enacting cybercrime laws, building specialized units, and fostering international cooperation — can inform Lebanon’s efforts to bolster its cybersecurity posture. Addressing cultural attitudes toward cyber risks and increasing investment in training and technology will be essential for Lebanon’s digital security moving forward.
