Cyber Threat Intelligence · Africa

Sector reports on the threats reshaping African digital infrastructure.

In-depth, source-cited threat reports on the institutions, sectors, and supply chains that move money, data, and trust across the continent. 

04Reports Published
2026Edition
AfricaCoverage
100%Source-Cited

Published Reports

04 Live 2026 Edition
Financial Services · Central Banking 01
Central Banks Under Attack

Threat actors, attack patterns, and defensive controls for African central banks, reserve custodians, and the national payment systems they run.

$100M+ attributed to APT38 across bank thefts in Africa & Asia — the precedent that reshaped every SWIFT-connected institution
AudienceGovernors · CISO · Risk
FormatLong-form report
Read report
Financial Services · Commercial Banking 02
Banks Under Siege

Heists, ransomware, insider abuse, and third-party breaches across Africa's commercial banks and the card and payment rails they operate.

$174M stolen from Kenyan banks since 2019 — one of eighteen documented incidents catalogued across the continent
AudienceCISO · CIO · Fraud
FormatLong-form report
Read report
Education · Research 03
Universities Under Siege

Ransomware, research-data theft, and the soft-target reality of African higher-education networks — large, open, and under-resourced.

Education the most-targeted sector for ransomware globally — and Africa's universities sit on the front line
AudienceVC · CIO · IT Security
FormatLong-form report
Read report
iGaming · Sports Betting 04
Stakes Online

DDoS extortion, account takeover, payment fraud, and bot abuse across Africa's fast-growing online betting and gaming operators.

Always-on a 24/7 revenue surface where minutes of downtime are directly monetisable by extortionists
AudienceCISO · CTO · Ops
FormatLong-form report
Read report
About this series

LockDown IT is an Africa-based cybersecurity practice and a Cloudflare Enterprise Services Partner, working with financial institutions, public-sector bodies, and enterprises across the continent on threat intelligence, security architecture, and incident response.

Each report translates open-source intelligence and field experience into practitioner-grade guidance for security leaders. Reports are independent editorial; product mentions reflect their relevance to the threats covered.

Talk to us

To arrange a briefing, a sector report walkthrough, or a 30-day Cloudflare product trial for your institution: