Ransomware remains one of Africa’s fastest-growing cyber threats, with South Africa accounting for the overwhelming majority of reported detections.
According to the INTERPOL African Cyberthreat Assessment Report 2026, South Africa recorded 92 per cent of all ransomware detections across the continent in 2025.
Cabo Verde ranked a distant second with four per cent, while Nigeria, Kenya and Madagascar each accounted for one per cent.
The remaining African countries collectively made up the final one per cent.
Ransomware is malicious software that locks or encrypts files or entire computer systems, with attackers demanding payment before restoring access.
Cybercriminals often spread ransomware through phishing emails, malware downloads and unpatched software vulnerabilities.
The findings highlight the urgent need for stronger cybersecurity measures, including regular software updates, employee awareness training, secure data backups and robust incident response plans.
As digital adoption accelerates across Africa, organisations and governments face increasing pressure to strengthen their cyber defences against evolving ransomware attacks.
