Alerts – Microfinance-CERT

USSD serves as the primary operational channel for Mobile Money across Africa. It runs natively on all mobile devices without requiring internet connectivity or smartphone applications. However, its core design characterized by short-lived sessions, unencrypted over-the-air exchanges, and text command strings makes it a prime target for threat actors, introducing risks distinct from SIM swapping.

HIGH

REF : TG-IMF-2026-014

Vulnerability in Microsoft Exchange Server

Published on : July 29, 2026

On May 14, 2026, Microsoft issued a security advisory regarding the CVE-2026-42897 vulnerability affecting Exchange Server. This vulnerability allows an unauthenticated attacker to trigger a remote indirect code injection (XSS) and bypass security policies when a

INFORMATIVE

Smishing and fake déposits : understanding scams targeting Mobile Money users

Published on : July 10, 2026

In Togo, Mobile Money has become an everyday payment method. This widespread adoption shifts the cybersecurity landscape: today, the simplest and most lucrative target for an attacker is no longer the bank's central server, but the user.

Session hijacking and fake confirmation code scams: the ussd channel as an attack surface

Vulnerability in Microsoft Exchange Server

Smishing and fake déposits : understanding scams targeting Mobile Money users