{"id":27915,"date":"2025-06-27T22:36:10","date_gmt":"2025-06-27T21:36:10","guid":{"rendered":"https:\/\/naijaeyesblog.com\/?p=27915"},"modified":"2025-06-27T22:41:21","modified_gmt":"2025-06-27T21:41:21","slug":"cybercrime-report","status":"publish","type":"post","link":"https:\/\/naijaeyesblog.com\/ro\/cybercrime-report\/","title":{"rendered":"Cybercrime Report: 46% of Firms Pay Ransom"},"content":{"rendered":"

In a striking revelation, a newly released Cybercrime report<\/strong> highlights that nearly half of global organisations struck by ransomware last year chose to pay for the return of their data. For Nigerian firms, this trend is particularly alarming, as a notable proportion are among those caving to cybercriminal demands.<\/p>\n\n\n\n

Rising tide of ransomware payments<\/h2>\n\n\n\n

The \u201cState of Ransomware\u202f2025\u201d report by cybersecurity specialist Sophos reveals that around 46% of companies<\/strong> worldwide paid cybercriminals to regain access to their systems \u2013 the second-highest rate<\/strong> recorded in the past six years. This marks a critical shift: despite increased awareness and stronger security postures, organisations remain vulnerable to the high-stakes game of ransom payments.<\/p>\n\n\n\n

Strikingly, while the median ransomware payment dropped by half\u2014from \u202f$2\u202fmillion in 2024 to $1\u202fmillion in 2025<\/strong>\u2014large firms still face astronomical demands. In contrast, smaller organisations continue to grapple with demands below $350,000<\/strong>. To cut losses, 53% of victims<\/strong> successfully negotiated lower settlements, either directly or with the help of expert incident responders.<\/p>\n\n\n\n

The Nigerian connection<\/h2>\n\n\n\n

Although the Cybercrime report<\/strong> is global in scope, its findings resonate closely with Nigeria\u2019s cybersecurity landscape. Last year, Sophos identified that 71% of Nigerian organisations<\/strong> were targeted by ransomware, and 44% of those affected<\/strong> paid ransoms to regain data access. Additionally, smaller firms and SMEs in Nigeria are under siege, reporting a 115% surge in cyber-attacks via malicious fake apps disguised as productivity tools or AI platforms.<\/p>\n\n\n\n

Attack trends and root causes<\/h2>\n\n\n\n

More than ever, cybercriminals are exploiting unpatched systems. According to the report, 40% of intrusions<\/strong> stemmed from pre-existing vulnerabilities unknown to the victims . This reflects a fundamental weakness in network hygiene and risk management.<\/p>\n\n\n\n

Missing cybersecurity skills compound the problem. A staggering 63% of victims<\/strong> cited a lack of talent\u2014especially in larger companies\u2014as a major barrier to prevention and response.<\/p>\n\n\n\n

\"Cybercrime<\/figure>\n\n\n\n

Glimmers of improvement<\/h2>\n\n\n\n

Despite the gloom, the Cybercrime report<\/strong> notes encouraging progress. In 2025, 44% of attacks<\/strong> were blocked before file encryption occurred\u2014the highest success rate in six years. Additionally, fewer than half of ransomware incidents included data encryption, another six-year low.<\/p>\n\n\n\n

Recovery times, too, are shortening: over 50% of firms<\/strong> restored operations within a week\u2014compared to just 35% in 2024\u2014and only 18%<\/strong> required more than a month, down from 34%. Notably, the average recovery cost declined from US\u202f$2.73\u202fmillion<\/strong> in 2024 to about US\u202f$1.53\u202fmillion<\/strong> in 2025.<\/p>\n\n\n\n

Strategic lessons for resilience<\/h2>\n\n\n\n

The Cybercrime report<\/strong> puts emphasis on three pillars:<\/p>\n\n\n\n

    \n
  1. Patch and prepare<\/strong>
    Rapidly identifying and closing vulnerabilities remains essential. Organisations that proactively patch systems significantly reduce the risk of ransomware incidents.<\/li>\n\n\n\n
  2. Invest in expertise<\/strong>
    Bringing in skilled incident responders can not only contain breaches but also empower organisations to negotiate down extortion payments\u2014delivering both technical and financial relief.<\/li>\n\n\n\n
  3. Layered security strategy<\/strong>
    The report urges broad deployment of multi-factor authentication, continuous network monitoring, external incident-response support, and reliable data backups.<\/li>\n<\/ol>\n\n\n\n

    These measures align with earlier expert guidance: in 2022, the Nigerian Communications Commission and Deloitte highlighted that strong passwords, multi-factor authentication, and user education were critical in mitigating Cybercrime<\/strong>.<\/p>\n\n\n\n

    What this means for Nigerian organisations<\/h2>\n\n\n\n

    Nigeria\u2019s business landscape faces an especially acute threat from Cybercrime<\/strong>. The blend of rising ransomware activity, an influx of fake malware malware masked by productivity and AI apps, and underinvestment in cybersecurity creates fertile ground for cybercriminals targeting both large enterprises and SMEs.<\/p>\n\n\n\n

    To reverse this trend, Nigerian firms must:<\/p>\n\n\n\n