Phishing, ransomware and QR-code scams are among the biggest cyber threats facing African businesses, with criminals increasingly using AI to make attacks faster and harder to detect.
New findings from ESET’s H1 2026 Threat Report show that South Africa is particularly exposed, with phishing accounting for 45.4% of threats targeting the country, compared with 29.9% across Africa.
AI Gives Cybercriminals a New Advantage
Attackers are using AI to improve established techniques while introducing new threats. ESET highlighted PromptSpy, an Android malware that incorporates generative AI into its execution process.
The security firm also warned about malicious third-party “AI skills” downloaded from public repositories. Of around 900,000 skills analysed, more than 3,000 were identified as malicious.
Quishing Gains Ground
QR-code phishing, known as quishing, is also becoming a bigger concern. Around 11% of detected phishing emails during the reporting period contained QR codes, often directing users to their phones where corporate security controls may be weaker.
South Africa recorded a 2.1% quishing detection rate, suggesting the threat could still grow.
Businesses Face Growing Pressure
ESET also reported a 108% increase in ClickFix attacks between the second half of 2025 and the first half of 2026. These scams trick users into believing their device has a problem before convincing them to run harmful commands.
Security experts warn that South Africa’s relatively wealthy and predominantly English-speaking market makes it an attractive target.
As cybercrime becomes increasingly sophisticated, businesses are being urged to strengthen security measures and remain cautious of unexpected links, QR codes, software and AI tools.
Main Image: Tech Central
