South Africa Faces Escalating Cybercrime Threat in 2025, Warns Security Expert
Cyberattacks in South Africa are projected to intensify in 2025, potentially worsening faster than global trends, according to Charl van der Walt, head of security research at Orange Cyberdefense.
This warning follows a surge in cyberattacks targeting major South African corporations and at least four state-owned entities in 2024.
Systemic Factors Driving Cybercrime
Van der Walt attributes the growing cybercrime wave to a complex interplay of political, economic, sociocultural, and technological factors. “The trajectory of crime in the country will change only when these factors change,” he stated.
While South Africa’s technological infrastructure matches global standards in some areas, it lags in critical aspects like digital adoption and security capabilities. The expert noted that sociocultural and economic conditions continue to facilitate criminal activity, while political complexities in Africa and globally further exacerbate the situation.
Recent High-Profile Cyberattacks
2024 saw several devastating attacks on government entities:
- ITAC (January 2024): Ransomware attack compromising employee and stakeholder data
- GPAA (February 2024): 68GB data breach claimed by LockBit hacking group
- NHLS (June 2024): 1.2TB of sensitive health data stolen by BlackSuit, crippling critical medical systems
Emerging Cyber Threats
Cyber Extortion vs. Digital Fraud
Van der Walt identifies two primary cybercrime categories:
- Cyber Extortion (CyX): Opportunistic attacks targeting vulnerable digital systems
- Digital Fraud: Context-specific scams adapting to local conditions
South Africa’s exposure stems from its combination of vulnerable systems and willingness to pay ransoms. The expert predicts increased business email compromises, SIM swap fraud, and alternative payment system scams, with crypto-related crimes potentially decreasing.
State-Sponsored Cyber Threats
Beyond criminal elements, Van der Walt warns of growing risks from:
- State-sponsored espionage operations
- Hacktivist campaigns aligned with geopolitical agendas
- Disinformation and critical infrastructure attacks
“South Africa is very exposed to diverse forms of state-aligned power projection campaigns,” Van der Walt cautioned, noting their potential to undermine the country’s long-term stability.
With cybercrime showing no signs of global decline, South African organizations and government entities must prioritize cybersecurity measures to mitigate these escalating threats.