Nigerian Organisations Face 4,361 Cyberattack Attempts Weekly as DNS Security Concerns Grow

FAPOHUNDA GRACE

As cyber threats intensify, NITDA plans to include DNS security checks in government cybersecurity assessments, while NiRA warns that weak domain protection could expose businesses and online services to fraud.

Nigeria's growing digital economy is facing heightened cybersecurity risks, with organisations experiencing an average of 4,361 attempted cyberattacks per week, according to figures from Check Point Research cited by the Nigeria Internet Registration Association (NiRA).

The figures relate to June 2026 and compare with a global average of approximately 2,270 attempted attacks per organisation weekly.

The warning comes as cybersecurity experts raise concerns about weaknesses in Nigeria's Domain Name System (DNS) infrastructure, which helps users access websites, banking platforms, government portals and other online services.

At a cybersecurity awareness webinar organised by NiRA, the National Information Technology Development Agency (NITDA) announced plans to include DNS security in its cybersecurity assessment protocols for Ministries, Departments and Agencies (MDAs).

The agency is also pushing for government-owned websites using the .gov.ng domain to adopt Domain Name System Security Extensions (DNSSEC), a technology designed to make it harder for attackers to manipulate domain information and redirect internet users to fraudulent websites.

Nigeria's Cyberattack Exposure Raises Concerns

The 4,361 weekly figure highlights the pressure facing Nigerian organisations as businesses, financial institutions and government agencies increasingly depend on digital platforms.

According to NiRA President Adesola Akinsanya, the June figures from Check Point Research put Nigeria's average above the global figure of 2,270 weekly attacks per organisation.

The threat is not limited to stolen passwords or compromised social media accounts. Attackers can target the infrastructure supporting websites and online services, potentially exposing large numbers of users to phishing, financial fraud and service disruption.

Akinsanya also cited Nigeria Inter-Bank Settlement System (NIBSS) figures showing that digital-payment fraud amounted to ₦25.85 billion in 2025.

He cautioned that a decline in reported fraud incidents should not automatically be interpreted as improved security, as some cases may go unreported.

What Is DNS and Why Does Its Security Matter?

The Domain Name System, commonly known as DNS, works like the internet's address book.

When someone enters a website address into a browser, DNS helps translate that name into the numerical internet address required to locate the website.

For example, DNS helps a browser find the correct server when someone visits a bank's website or a government portal.

However, if attackers manipulate DNS records or compromise access to domain management accounts, users could be redirected to fraudulent websites designed to steal login credentials, personal information or financial details.

This is particularly concerning for organisations operating online banking services, payment platforms, e-commerce websites and public digital infrastructure.

How DNSSEC Can Help Protect Nigerian Websites

DNSSEC, short for Domain Name System Security Extensions, adds a layer of authentication to DNS.

It uses digital signatures to help internet resolvers verify that DNS responses are authentic and have not been altered during the process.

This makes it more difficult for attackers to manipulate DNS information and redirect users to malicious destinations.

During the webinar, NITDA Director-General Kashifu Inuwa Abdullahi, represented by Oluwasegun Falayan, said DNS security would become part of the agency's cybersecurity assessment process.

He also emphasised the need for government-owned .gov.ng websites to adopt DNSSEC.

The announcement signals an effort to move beyond simply registering official government domains towards ensuring that those domains have appropriate security protections.

However, DNSSEC is not a complete cybersecurity solution. It does not encrypt website traffic, prevent distributed denial-of-service attacks or protect an organisation from every form of account compromise.

Proper configuration and ongoing maintenance are also necessary to prevent security errors that could make websites inaccessible.

Only 15 of Nigeria's 164 Accredited Registrars Have Adopted DNSSEC

Despite the importance of domain security, adoption remains limited across Nigeria's domain registration ecosystem.

NiRA disclosed that only 15 of the country's 164 accredited domain registrars had adopted DNSSEC.

The association's president called for stronger implementation across the industry, including better protection of domain management credentials and improved security practices among service providers.

He also urged organisations to activate multi-factor authentication on domain accounts and establish procedures for responding to unauthorised changes to their DNS records.

Internet service providers were also encouraged to enable DNSSEC validation so that their systems can check the authenticity of signed DNS responses.

The low adoption figure suggests that strengthening Nigeria's internet infrastructure will require cooperation between government agencies, domain registrars, internet service providers and businesses.

What Organisations Should Do to Reduce DNS Security Risks

While DNSSEC can strengthen domain protection, organisations need additional security measures to protect their online infrastructure.

Some important steps include:

Enable DNSSEC: Organisations should work with their domain registrars and DNS providers to implement and properly configure DNSSEC.
Protect domain accounts: Use strong passwords, multi-factor authentication and restricted administrative access.
Monitor DNS changes: Set up alerts for unexpected changes to domain records and nameserver settings.
Update software: Regularly patch servers, websites and network infrastructure to reduce exposure to known vulnerabilities.
Train employees: Educate staff about phishing, suspicious links and credential theft.
Prepare an incident response plan: Establish clear procedures for responding to compromised accounts, domain hijacking and other cybersecurity incidents.

These measures can help reduce the likelihood of attacks and limit their impact when security incidents occur.

Why This Matters for Nigeria's Digital Economy

Nigeria's digital economy increasingly depends on secure online infrastructure.

Banks process transactions digitally, businesses receive payments through online platforms, and government agencies provide more services through websites and electronic portals.

A compromised domain can therefore create consequences beyond an individual website. It can expose customers to fraud, disrupt essential services and weaken confidence in digital platforms.

For Nigeria, the challenge is not simply encouraging more businesses and citizens to use digital services. It is also ensuring that the systems supporting those services are properly protected.

NITDA's proposed DNS security assessments and NiRA's call for wider DNSSEC adoption are steps towards addressing that challenge.

However, the impact will depend on how consistently organisations implement the recommended protections and maintain them over time.

TechCrier will continue tracking developments in Nigeria's cybersecurity infrastructure and the policies shaping digital safety.

CYBERSECURITY

Pages

Start Up