Alerts – Microfinance-CERT

The digital transformation of microfinance institutions has significantly improved access to financial services. Web applications, customer portals, management platforms, payment services and administrative interfaces now make it possible to process a growing volume of operations. However, this evolution also increases exposure to cyber threats.

INFORMATIVE

Session hijacking and fake confirmation code scams: the ussd channel as an attack surface

Published on : August 29, 2026

USSD serves as the primary operational channel for Mobile Money across Africa. It runs natively on all mobile devices without requiring internet connectivity or smartphone applications. However, its core design characterized by short-lived sessions, unencrypted over-the-air exchanges, and text command strings makes it a prime target for threat actors, introducing risks distinct from SIM swapping.

INFORMATIVE

REF : TG-CTI-2026-0826

Strategic Threat Outlook: Africa Cybersecurity Landscape 2026

Published on : August 26, 2026

Recent intelligence reports and cross-sector CTI analysis highlight a structural shift in the African cyber threat landscape. Threat actors are increasingly pivoting from traditional malware exploits toward identity-based compromises, supply chain targeting, and operational disruption. As digital adoption accelerates across financial, telecom, and critical infrastructure sectors, organizations face systemic risks driven by AI-accelerated vulnerability discovery […]

INFORMATIVE

What CTI investigations reveal about microfinance institutions in west africa?

Published on : August 17, 2026

Investigations Conducted by Cyber Defense Africa (CDA) and CERT.tg in West Africa Reveal a Clear Reality: Microfinance Faces Increasingly Structured Cyberattacks. By correlating Dark Web intelligence, credential leak analyses, Threat Intelligence feeds, and Open-Source Intelligence (OSINT), several major trends emerge regarding threat actor methodologies and the sector’s primary vulnerabilities:

HIGH

REF : TG-IMF-2026-014

Vulnerability in Microsoft Exchange Server

Published on : July 29, 2026

On May 14, 2026, Microsoft issued a security advisory regarding the CVE-2026-42897 vulnerability affecting Exchange Server. This vulnerability allows an unauthenticated attacker to trigger a remote indirect code injection (XSS) and bypass security policies when a

INFORMATIVE

Smishing and fake déposits : understanding scams targeting Mobile Money users

Published on : July 10, 2026

In Togo, Mobile Money has become an everyday payment method. This widespread adoption shifts the cybersecurity landscape: today, the simplest and most lucrative target for an attacker is no longer the bank's central server, but the user.

INFORMATIVE

Why african microfinance institutions have become a prime target for cybercriminals

Published on : June 1, 2026

Essential to financial inclusion across Africa, the microfinance sector is undergoing rapid digital transformation. Web portals, mobile applications, and interconnected services now enable institutions to serve millions of clients. However, this expanding digital footprint also significantly broadens their attack surface.

Stay ahead of emerging
cyber threats

The dark web : the invisible threat targeting microfinance institutions

Session hijacking and fake confirmation code scams: the ussd channel as an attack surface

Strategic Threat Outlook: Africa Cybersecurity Landscape 2026

What CTI investigations reveal about microfinance institutions in west africa?

Vulnerability in Microsoft Exchange Server

Smishing and fake déposits : understanding scams targeting Mobile Money users

Why african microfinance institutions have become a prime target for cybercriminals

Stay ahead of emerging cyber threats

The dark web : the invisible threat targeting microfinance institutions

Session hijacking and fake confirmation code scams: the ussd channel as an attack surface

Strategic Threat Outlook: Africa Cybersecurity Landscape 2026

What CTI investigations reveal about microfinance institutions in west africa?

Vulnerability in Microsoft Exchange Server

Smishing and fake déposits : understanding scams targeting Mobile Money users

Why african microfinance institutions have become a prime target for cybercriminals

Stay ahead of emerging
cyber threats