From phishing to ransomware
Cyber-attacks on African corporate systems are increasing, with recent incidents highlighting growing vulnerabilities in both public and private sector digital infrastructure.
Namibians are rapidly adopting digital technologies across personal and corporate platforms. While this shift supports economic development, it also exposes users and organisations to a rising volume of cybercrime.
Modern attackers use tools including malware, viruses and phishing emails - fraudulent messages designed to trick users into revealing sensitive information - to access personal and corporate data.
A recent breach involving South African retailer Pick n Pay highlighted the scale of the risk, with customer information including names, email addresses, phone numbers, delivery addresses and encrypted passwords reportedly compromised. The company has linked the incident in part to reliance on legacy systems.
Outdated software
Legacy systems refer to outdated software, hardware and IT infrastructure that remain in use because upgrading or migrating them can be complex and costly. While organisations may modernise front-end applications, older backend systems are sometimes left unchanged, creating security vulnerabilities.
These systems often lack up-to-date security patches, leaving potential entry points that cybercriminals actively scan and exploit.
Smaller organisations in Namibia are considered particularly exposed, with many still relying on unpatched or outdated systems and limited cybersecurity capacity.
The growing use of artificial intelligence is further increasing the sophistication of attacks. Cybersecurity experts say AI is now being used to automate phishing campaigns and create highly convincing messages tailored to specific regions and organisations.
This has contributed to a rise in ransomware attacks, in which systems are encrypted and access is blocked until a payment is made. In many cases, businesses under pressure opt to pay ransoms rather than attempt costly recovery from compromised systems.
Organisation-wide exposure
Experts warn that even a single employee clicking a malicious link can expose an entire organisation, particularly where systems are outdated and security awareness is limited.
The Ministry of Information and Communication Technology has established the Namibia Cyber Security Incident Response Team (NAM-CSIRT) to coordinate responses to cyber incidents and strengthen national digital resilience.
Cybersecurity experts say awareness and staff training remain critical, alongside technical upgrades.
They warn that cybersecurity is no longer a distant risk but an immediate and growing challenge for organisations across Namibia, particularly those still dependent on legacy systems. - Peter Karon, Infrastructure Supervisor at Green Enterprise Solutions.
