At its annual Cyber Security Weekend for the Middle East, Turkey, and Africa (META), Kaspersky’s Global Research and Analysis Team discussed key cybersecurity trends. Topics included ransomware, advanced persistent threats (APTs), supply chain attacks, threats to mobile devices, AI, and IoT.
In the first quarter of 2025, Turkey and Kenya saw the highest number of users hit by online threats. Qatar, Nigeria, and South Africa followed. Saudi Arabia had the fewest affected users, with Pakistan coming in second lowest within the META region.
Kaspersky researchers closely monitor sophisticated cyberattacks. They track 25 active APT groups in META. Notable groups include SideWinder, Origami Elephant, and MuddyWater. A rising trend is the development of new exploits for mobile devices and methods designed to evade detection.
Ransomware remains one of the most damaging cyber threats. Data shows that the percentage of users affected increased slightly from 2023 to 2024, reaching 0.44% globally. In the Middle East, the rate rose to 0.72%. In Africa, it grew to 0.41%. In Turkey, it reached 0.46%. Attackers rarely spread ransomware widely; instead, they target high-value organizations.
The Middle East faces more ransomware attacks due to rapid digital growth and uneven cybersecurity skills. In Africa, lower levels of digitization and weaker economies result in fewer big targets for ransomware hackers.
AI-powered tools are now used in creating ransomware. FunkSec, a new group, appeared in late 2024 and quickly gained attention. It claimed many victims in December. Operating as part of a Ransomware-as-a-Service model, FunkSec uses double extortion—encrypting data and stealing it. They focus on sectors like government, tech, finance, and education in Europe and Asia.
By 2025, ransomware will likely exploit new weaknesses. Dark web markets are offering large language models (LLMs) for cybercrime. These tools make it easier for less skilled hackers to create fake emails, launch phishing attacks, or develop ransomware automatically.
Ransomware is one of the top cybersecurity threats today. Hackers target businesses of all sizes, everywhere, including META. They adopt new methods, such as making ransomware work on multiple platforms or spreading itself. They also target entry points such as IoT devices, smart appliances, and outdated hardware. These weak links often go unnoticed, making them easy targets.
Sergey Lozhkin from Kaspersky says organizations should use layered security. Keep systems updated, segment networks, monitor threats constantly, back up data regularly, and train users.
Kaspersky urges organizations to follow best practices. Always update software to block hackers from exploiting flaws. Give security teams access to latest threat intel and keep training them to improve their skills.
For more daily updates, please visit our News Section.