What Are Cyber Threats
🔥 Opening Hook
The word “cyberattack” conjures images
of hooded figures in dark rooms
typing furiously at multiple screens.
The reality is far more mundane —
and far more dangerous.
Most cyberattacks begin with an
ordinary email, a familiar-looking
website, or a simple phone call.
They succeed not because attackers
are technical geniuses — but because
most people have never been taught
what to look for.
You are about to be taught.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
- What Is a Cyber Threat?
A cyber threat is any malicious
attempt to access, disrupt, manipulate,
or exploit digital systems, networks,
devices, or the data they contain.
Cyber threats are carried out by:
→ Individual criminals seeking
financial gain
→ Organised criminal groups
operating at scale
→ State-sponsored actors targeting
governments and infrastructure
→ Insiders — employees or contractors
misusing their access
→ Opportunistic attackers using
automated tools to exploit
any vulnerability they can find
The targets range from individuals
and small businesses to multinational
corporations and national governments.
No one is too small to be targeted.
No one is too obscure to be found.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
- What Attackers Are After
Understanding what attackers want
helps you understand what to protect.
The most common objectives:
Financial gain:
→ Stealing money directly from
bank accounts or payment systems
→ Ransomware — encrypting data
and demanding payment for its release
→ Selling stolen data on criminal markets
→ Fraud using stolen identities
or payment details
Data theft:
→ Personal information — names,
addresses, identification numbers
→ Login credentials — usernames
and passwords
→ Financial data — card numbers,
account details
→ Organisational data — client
records, strategic plans,
intellectual property
Disruption:
→ Taking down websites, systems,
or services
→ Disrupting critical infrastructure —
power, water, hospitals
→ Damaging an organisation’s
reputation or operations
Espionage:
→ Stealing government or
corporate secrets
→ Monitoring communications
of specific individuals
→ Gaining competitive or
strategic advantage
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
- The Cyber Threat Landscape
Globally and in Africa
Cyber threats are a global problem —
but they manifest differently
in different contexts.
Globally:
→ Financial institutions, healthcare
organisations, and government
agencies are among the most
frequently targeted sectors
→ Ransomware attacks have disrupted
hospitals, schools, and public
services in multiple countries
→ Data breaches at major corporations
have exposed the personal information
of hundreds of millions of people
→ Supply chain attacks — targeting
software providers to reach
their clients — are growing in
sophistication and frequency
In Africa:
→ The rapid growth of mobile money
and digital banking has created
significant new attack surfaces
→ Mobile money fraud and SIM swap
attacks are among the most
prevalent threats across the continent
→ Many organisations lack mature
cybersecurity infrastructure —
making them attractive targets
→ Growing internet adoption among
populations with limited digital
security awareness increases
individual vulnerability
→ African cybersecurity talent and
policy frameworks are developing —
but the threat landscape is
evolving faster
This context matters because it
shapes the specific threats you
are most likely to encounter —
whether you work in Lagos, Nairobi,
London, or anywhere in between.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
- The Three Vectors of Attack
Most cyber attacks reach their
targets through one of three vectors:
Vector 1 — Technical vulnerabilities
Exploiting weaknesses in software,
hardware, or network configurations.
→ Unpatched software with known
security flaws
→ Misconfigured servers or
network devices
→ Weak encryption or outdated
security protocols
Vector 2 — Human behaviour
Manipulating people into taking
actions that compromise security.
→ Clicking malicious links
→ Revealing passwords or
sensitive information
→ Installing malicious software
→ Granting access to unauthorised individuals
Vector 3 — Physical access
Gaining physical access to devices,
networks, or facilities.
→ Stolen or lost devices
→ Infected USB drives
→ Accessing unattended unlocked screens
Of these three vectors — human
behaviour is consistently the
most exploited.
Not because people are careless.
Because attackers are sophisticated
at exploiting entirely normal human
tendencies — trust, urgency,
curiosity, and helpfulness.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⚡ Power Insight
Cybersecurity is fundamentally
a human problem — not a technology
problem. The most sophisticated
security systems in the world
can be bypassed by a single
uninformed click. Understanding
the threat landscape is the first
and most important step in becoming
a professional who makes their
organisation safer — not more vulnerable.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✍️ Quick Action Challenge
⚡ Takes 5 minutes:
Think about the last week of
your digital activity.
Ask yourself:
→ Did I receive any emails or
messages that seemed slightly
off — unexpected, urgent,
or from an unfamiliar source?
→ Did I click any links without
checking where they led?
→ Did I connect to any public
Wi-Fi networks and access
sensitive accounts?
You do not need to do anything
with the answers right now.
Just notice them.
Awareness is always the first step.
🚀 Want to go deeper?
The African Union has published
a Cybersecurity Framework for Africa
— available at au.int. Reading the
executive summary gives you a clear
picture of where the continent
stands on cybersecurity — and
where the gaps remain.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📚 Sources & Further Reading
- African Union —
Cybersecurity Framework for Africa
au.int/en/cyberecurity - INTERPOL —
African Cyberthreat Assessment Report
interpol.int/en/Crimes/
Cybercrime - World Economic Forum —
Global Cybersecurity Outlook
(updated regularly)
weforum.org/reports - ENISA —
Threat Landscape Report
(updated regularly)
enisa.europa.eu/topics/
cyber-threats - ITU —
Global Cybersecurity Index
(updated regularly)
itu.int/en/ITU-D/Cybersecurity
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📌 Key Takeaway
Cyber threats are not abstract
or distant. They are happening
continuously — targeting ordinary
professionals in ordinary situations.
The professionals who understand
what those threats look like and
how they work are infinitely harder
to compromise than those who do not.
That understanding starts here.