Cyber Crime Threat Looms Over Namibia as Internet Adoption Grows

As the number of Namibians with access to the internet continues to grow, thanks in part to affordable feature phones from China, the country is facing a growing threat from cyber crime. According to Kaspersky Lab, many of these phones are vulnerable to security risks, including data leaks and theft.

USSD Codes: A Security Risk

Unstructured Supplementary Service Data (USSD) codes are widely used to access digital financial services, especially on feature phones. However, security testing has revealed vulnerabilities in USSD systems, including remote unauthorized access to mobile devices and tampering with them. This highlights the need for stronger authentication measures and encryption to protect user data and prevent unauthorized access to mobile devices.

National Cybersecurity Strategy Needed

Namibia lacks a national center for identifying vulnerabilities and threats, communication to stakeholders, and continuous monitoring of threats. This has led to a lack of actionable threat intelligence and a realistic view of the current threat profile at the country level. While the private sector is providing some threat analysis and monitoring services through secure operation centers (SOCs), these services are limited and not included by default in most organizations.

Cyber Awareness: A Low Priority

Low cybersecurity awareness is a major issue in Namibia, especially among rural communities. The absence of a national cyber awareness and resilience program has led to a lack of knowledge about online risks and vulnerabilities. Metrics such as the Cybersecurity Capacity Maturity Model for Nations can help assess the success of national awareness programs. However, Namibia’s overall security maturity is extremely low, and organizations are inadequately prepared to guard against cyber crime.

Toward a Stronger National Cybersecurity Strategy

The Ministry of Information and Communication Technology has launched a National Cybersecurity Strategy and Awareness Creation Plan to educate citizens about the risks associated with cyber crime and promote cybersecurity awareness. The plan aims to:

• Protect critical information infrastructure
• Educate the public
• Collaborate with public and private entities on cybersecurity
• Target government employees, ministries, agencies, regional councils, local authorities, school learners, teaching staff, and the public

Conclusion

Namibia’s lack of a national cybersecurity strategy and awareness program has left it vulnerable to cyber crime threats. The country needs a multi-stakeholder approach that includes partnerships with the private sector for the development of secure applications and infrastructure. Targeted solutions are needed to build up security nationally, especially in rural communities where digital inclusion and literacy levels are low. By raising awareness and building stronger defensive mechanisms and controls, Namibia can protect its citizens from cyber crime threats.