Africa

Cybercriminals are actively targeting African financial institutions using open-source tools to establish footholds and sell network access to other threat actors. Palo Alto Networks Unit 42 tracks this activity as CL-CRI-1014, with attacks observed since July 2023.