Africa has once again emerged as the most targeted region for cyberattacks globally, with the telecommunications sector leading the list of most-attacked industries, according to Check Point Research’s Global Threat Intelligence Report for July 2025.

The continent recorded an average of 3,374 attacks per organisation per week. This is up 7% year-on-year and surpasses APAC (2,809) and Latin America (2,783). Nigeria was hit hardest, with a staggering 6,101 weekly attacks per organisation, marking a 67% YoY surge.

“While Africa rapidly rolls out digital transformation strategies, its cybersecurity defences are lagging. Prevention-first strategies, powered by AI, are the only way to stay ahead,” said Lorna Hardie, Regional Director: Africa, Check Point Software Technologies.

  • Africa: 3,374 attacks per org/week (up 7% YoY)
  • Nigeria: 6,101 attacks (Up 67% YoY)
  • Kenya: 3,468 attacks (Down 25% YoY)
  • Angola: 3,731 attacks (Down 43% YoY)
  • South Africa: 2,113 attacks (UP 14% YoY)
  1. Telecommunications
  2. Government
  3. Financial Services
  4. Energy & Utilities
  • Global average: 1,947 attacks per org/week (up 5% YoY)
  • Education was the most targeted sector globally (4,210 attacks/week, up 24% YoY)
  • Agriculture saw the fastest growth in attacks (up 115% YoY)

Ransomware attacks jumped 41% YoY in July, with three groups dominating the threat landscape:

  • Qilin (Agenda): 17% of ransomware incidents – targets healthcare, education via phishing and double-extortion.
  • Akira: 9% – They attack Windows/Linux via VPN exploits and malicious attachments.
  • Play: 6% – known for targeting critical infrastructure via stolen credentials and unpatched vulnerabilities.

The most ransomware-hit industries were Business Services (10.5%), Healthcare (9.7%), and Industrial Manufacturing (9.4%).