The Cyber Security Experts Association of Nigeria (CSEAN) has released the cyber threat forecast for 2025, projecting that malicious actors will become more resourceful and
deploy increasingly advanced tactics and tools.

CSEAN, in a 2-page report titled ‘Nigeria Cyber Threat Forecast 2025,’ highlighted an urgent need for stakeholders across government, private sector, and civil society to address the growing complexities of Nigeria’s cybersecurity landscape.

The report, co-authored by Oluwafemi Osho, John Odumesi, Jonathan Ayodele, Polra Victor Falade, Hamzat Lateef and Olajumoke Oloyede, who are members of the Directorate of Research and Development, CSEAN, draws the forecast from surveys, open-source intelligence, cyber threat reports, and incident analyses,

It stressed that Nigeria must brace itself for a challenging 2025 as the threat actors pose a significant challenge to even the
world’s most experienced cybersecurity defenders, making it critical for stakeholders to anticipate emerging risks and implement robust protective measures.

This report forecasts a dynamic and challenging 2025 for Nigerian cybersecurity as AI-powered attacks, including deepfakes, will intensify, while misinformation campaigns will continue to manipulate public opinion, saying although they may be declined in ransomware attacks crypto scams, government benefit scams, and data breaches are expected to surge.

The body emphasized that “Japa” of skilled IT professionals will strain the sector, adding that insider threats, the exploitation of unlinked FinTech accounts, and the persistent threat of APTs and credential-stealing malware will further complicate the landscape.

Highlights of the trends anticipated for Nigeria in 2025 include an intensified AI powered attacks on both individual and businesses, saying deepfakes and other AI-manipulated content will be leveraged in phishing, social engineering, romance, and sextortion
scams, adding that misinformation and disinformation will continue to be potent tools for cyber-influence operations, enabling malicious actors to manipulate public perception and sway decision-making across various platforms.

“The surge in cryptocurrency scams is expected to escalate in 2025, driven by
rising crypto prices. Inexperienced investors will be targeted through social media scams, Ponzi schemes, and fake cryptocurrency exchanges and Government-benefit scams are expected to increase, exploiting economic
vulnerabilities. Phishing messages and fake social media posts will be used to steal personal information”.

They further warned that data breaches are expected to continue, hence the need to strengthening regulatory frameworks and public education are crucial to mitigating these risks adding that emigration of skilled IT and cybersecurity professionals will continue, straining Nigeria’s digital ecosystem, saying addressing underlying factors and creating a more supportive work environment is essential.

The body further lamented weak enforcement of the amended Nigeria Cybercrime Act 2024 and stressed the need for Investment in advanced investigation tools and strengthened legal frameworks adding that cybercriminals will continue to exploit unlinked FinTech accounts for money laundering and illicit transactions, saying collaboration among stakeholders is needed to fortify compliance.

The experts also warned that insider threats within Nigerian organisations, particularly in the financial sector will remain a pressing concern, hence the need for a robust insider threat management strategies and a culture of accountability adding that Advanced Persistent Threats (APTs) pose a significant but under-recognized threat. Organisations so institutions must take proactive measures, such as routine system updates and security audits, to guard against these persistent
attacks.

They stated “Credential and information-stealer malware will remain a threat in 2025. Organisations should focus on improving access management and user education.”