Cyber threats surge amid Namibia's digital growth
Cybersecurity under spotlight as attacks soar
Government is ramping up cybersecurity reforms, with a recent report noting a 314% spike in cyberattacks.
Namibia’s digital transformation is facing increasing threats from cybercriminals, prompting government-led reforms to bolster the country’s cyber defences.
A report released this week revealed that between January and March, Namibia’s cybersecurity team recorded 260 293 cyber events, a 314.8% increase compared to the previous quarter.
The report also identified 540 786 cyber vulnerabilities, most of them linked to exposed services such as CWMP, Telnet, SNMP and outdated encryption protocols, such as SSL POODLE.
These figures were shared during a presentation of the ICT parliamentary committee stakeholders workshop in Swakopmund earlier this week.
Dr. Audrin Mathe, the executive director at the information and communication technology ministry, emphasised that cybersecurity is not merely a technical matter but a foundational element of national development.
“The digital transformation journey requires that citizens understand the dangers of online crimes and the importance of cybersecurity,” Mathe said, highlighting cybersecurity as a strategic pillar in the ministry’s work.
Online defences
Mathe pointed to the establishment of the Namibia Cybersecurity Incident Response Team (Nam-CSIRT), housed under the Communications Regulatory Authority of Namibia (CRAN), as a key milestone.
Nam-CSIRT is responsible for coordinating cyber incident responses and protecting critical and sensitive information infrastructure across public and private sectors.
Emilia Nghikembua, head of Nam-CSIRT and CRAN CEO, emphasised the importance of stakeholder trust and collaboration. “Cybersecurity is a collective responsibility. A coordinated effort is critical to protecting our critical infrastructure and safeguarding the livelihoods of our citizens,” she said.
Mathe also confirmed that the long-awaited Cybercrime and Data Protection bills are nearing completion.
Once enacted, they will regulate the handling of personal data, criminalise cyber offences and bring Namibia’s legal framework in line with international norms.
Boosting connections and security
In addition to legal reform, the ministry is pursuing a broader digital agenda. This includes establishing a national database of ICT professionals, launching a digital literacy programme, expanding public Wi-Fi, and amending outdated legislation such as the Communications Act and Namibia Film Act to reflect current technologies.
Despite these advancements, Mathe acknowledged challenges, especially at the local level, where inadequate infrastructure, low awareness and poor coordination hamper cyber readiness.
A recent ransomware attack on the Otjiwarongo municipality, allegedly by a group called INC Ransom, underscored these vulnerabilities. The group allegedly infiltrated systems and demanded payment.
Nam-CSIRT responded by isolating the affected systems and launched an investigation.
Nam-CSIRT’s Quarterly Report covering January to March 2025 highlighted specific online crime incidents, including a deepfake scam impersonating the Bank of Namibia and a fraud case in which a woman lost over N$800 000 after unknowingly installing a remote-access tool.
Most recently, Nam-CSIRT also reported increased use of AI-driven ransomware, which adapts to environments and bypasses conventional security.
Coordinated national response
To support Nam-CSIRT, the government has allocated N$20 million in seed funding. Earlier this year, CRAN hosted a national stakeholder engagement session, where public and private sector entities were urged to establish sector-specific Cyber Incident Response Teams (CIRTs). These teams would improve threat intelligence sharing, incident coordination, and overall national cyber maturity.
A report released this week revealed that between January and March, Namibia’s cybersecurity team recorded 260 293 cyber events, a 314.8% increase compared to the previous quarter.
The report also identified 540 786 cyber vulnerabilities, most of them linked to exposed services such as CWMP, Telnet, SNMP and outdated encryption protocols, such as SSL POODLE.
These figures were shared during a presentation of the ICT parliamentary committee stakeholders workshop in Swakopmund earlier this week.
Dr. Audrin Mathe, the executive director at the information and communication technology ministry, emphasised that cybersecurity is not merely a technical matter but a foundational element of national development.
“The digital transformation journey requires that citizens understand the dangers of online crimes and the importance of cybersecurity,” Mathe said, highlighting cybersecurity as a strategic pillar in the ministry’s work.
Online defences
Mathe pointed to the establishment of the Namibia Cybersecurity Incident Response Team (Nam-CSIRT), housed under the Communications Regulatory Authority of Namibia (CRAN), as a key milestone.
Nam-CSIRT is responsible for coordinating cyber incident responses and protecting critical and sensitive information infrastructure across public and private sectors.
Emilia Nghikembua, head of Nam-CSIRT and CRAN CEO, emphasised the importance of stakeholder trust and collaboration. “Cybersecurity is a collective responsibility. A coordinated effort is critical to protecting our critical infrastructure and safeguarding the livelihoods of our citizens,” she said.
Mathe also confirmed that the long-awaited Cybercrime and Data Protection bills are nearing completion.
Once enacted, they will regulate the handling of personal data, criminalise cyber offences and bring Namibia’s legal framework in line with international norms.
Boosting connections and security
In addition to legal reform, the ministry is pursuing a broader digital agenda. This includes establishing a national database of ICT professionals, launching a digital literacy programme, expanding public Wi-Fi, and amending outdated legislation such as the Communications Act and Namibia Film Act to reflect current technologies.
Despite these advancements, Mathe acknowledged challenges, especially at the local level, where inadequate infrastructure, low awareness and poor coordination hamper cyber readiness.
A recent ransomware attack on the Otjiwarongo municipality, allegedly by a group called INC Ransom, underscored these vulnerabilities. The group allegedly infiltrated systems and demanded payment.
Nam-CSIRT responded by isolating the affected systems and launched an investigation.
Nam-CSIRT’s Quarterly Report covering January to March 2025 highlighted specific online crime incidents, including a deepfake scam impersonating the Bank of Namibia and a fraud case in which a woman lost over N$800 000 after unknowingly installing a remote-access tool.
Most recently, Nam-CSIRT also reported increased use of AI-driven ransomware, which adapts to environments and bypasses conventional security.
Coordinated national response
To support Nam-CSIRT, the government has allocated N$20 million in seed funding. Earlier this year, CRAN hosted a national stakeholder engagement session, where public and private sector entities were urged to establish sector-specific Cyber Incident Response Teams (CIRTs). These teams would improve threat intelligence sharing, incident coordination, and overall national cyber maturity.
Comments
Namibian Sun
No comments have been left on this article