May 15, 2026UpdateHigh
New indicators observed in East African telco
Two Kenyan telcos report matching TTPs; 24-hour containment achieved without customer-facing impact.
All threats
HighActive·Cyber / Financial Infrastructure
State-linked cyber operations against African financial infrastructure
Coordinated intrusion campaigns targeting central bank payment rails and telco operators across four major African economies. Attribution pending; techniques consistent with state-linked APT activity.
Region
Pan-African
Kenya, Nigeria, South Africa, Egypt
Opened
Dec 10, 2025
Last update May 15, 2026
Partners engaged
AU Cyber Security Expert Group · Smart Africa · AfricaCERT
Events tracked
5
1 milestones · 2 updates · 1 partner · 1 advisories
Replay events
5 / 5 events·UpdateMay 15, 2026New indicators observed in East African telco
Filter events
- Apr 27, 2026Analyst advisory
ADVISORY: Board-level tabletop for high-value payment infrastructure
INGO Advisory recommends board-level tabletop with dedicated scenario covering RTGS + mobile money hybrid failure.
- Mar 19, 2026Partner activity·AfricaCERT
AfricaCERT issues joint advisory
Cross-border advisory published with IOC list covering 42 domains and 118 hashes.
- Feb 6, 2026UpdateHigh
Second wave targets mobile money aggregators
Coordinated credential-stuffing campaign against three mobile-money aggregators; 480K accounts require reset.
- Dec 10, 2025MilestoneCritical
SWIFT-adjacent intrusion at tier-1 African bank
Confidential incident report confirms 72-hour attacker dwell time in message-queuing infrastructure. No confirmed funds movement.