Category: Civil Society
-
The Accountability Void: Who Answers When Algorithms Deny Your Rights?
Across Africa, digital identity systems are rapidly becoming the backbone of service delivery, financial inclusion, and governance. From Nigeria’s National Identification Number (NIN) to Kenya’s Huduma Namba and Ethiopia’s Fayda ID, governments are building large-scale digital public infrastructure to formalize identity and unlock access to essential services. Yet, as these systems expand, a critical question…
-
Darkstream Dispatch Vol.10_IPIDEA
Intelligence on Malware, Tools, Threat Actors, and Campaigns in Motion Introduction Darkstream Dispatch is a monthly intelligence report dedicated to tracking and analyzing malware families, threat actors, and cyber campaigns primarily targeting Civil Society Organizations (CSOs), human rights defenders, and advocacy groups. As digital threats become more sophisticated, CSOs face increasing risks from state-sponsored actors,…
-
Intel Wrap – January 2026
This month focuses on the Malware-as-a-Service toolkit “Stanley”, Meta’s new lockdown-style security feature for WhatsApp, Europols clampdown on Black Axe, and Google disrupting IPIDEA’s massive proxy network. “Stanley” Malware-as-a-Service Researchers disclosed “Stanley,” a malware-as-a-service toolkit sold on Russian cybercrime forums for $2,000–$6,000, enabling browser-based credential theft. Summary The toolkit allows attackers to create malicious Chrome…
-
Darkstream Dispatch Vol.7_UNC3840
Intelligence on Malware, Threat Actors, and Campaigns in Motion Introduction Darkstream Dispatch is a monthly intelligence report dedicated to tracking and analyzing malware families, threat actors, and cyber campaigns primarily targeting Civil Society Organizations (CSOs), human rights defenders, and advocacy groups. As digital threats become more sophisticated, CSOs face increasing risks from state-sponsored actors, cybercriminals,…
-
Intel Wrap – November 2025
This month focuses on Quantum Route Redirect, a new phishing tool targeting Microsoft 365 Users, the SesameOp Backdoor using OpenAI for covert C2 attacks, and a new Android Trojan called Sturnus. Quantum Route Redirect A new phishing tool called Quantum Route Redirect is being used to target Microsoft 365 users, making advanced phishing campaigns accessible…
-
Intel Wrap – October 2025
This month focuses on the Rise in AI Phishing Attacks, ‘Herodotus’ the Very Smart Android Trojan, and the now-patched Chrome Zero-day exploit. AI-driven Cyberattacks Continue To Be On The Rise Cybercriminals in Africa are increasingly leveraging AI to enhance phishing, impersonation, and deepfake attacks, leading to a sharp rise in AI-fueled cybercrime across the continent.…
-
Darkstream Dispatch Vol.8_UNC1543
Intelligence on Malware, Threat Actors, and Campaigns in Motion Introduction Darkstream Dispatch is a monthly intelligence report dedicated to tracking and analyzing malware families, threat actors, and cyber campaigns primarily targeting Civil Society Organizations (CSOs), human rights defenders, and advocacy groups. As digital threats become more sophisticated, CSOs face increasing risks from state-sponsored actors, cybercriminals,…
-
Darkstream Dispatch Vol.7_UNC6200
Intelligence on Malware, Threat Actors, and Campaigns in Motion Introduction Darkstream Dispatch is a monthly intelligence report dedicated to tracking and analyzing malware families, threat actors, and cyber campaigns primarily targeting Civil Society Organizations (CSOs), human rights defenders, and advocacy groups. As digital threats become more sophisticated, CSOs face increasing risks from state-sponsored actors, cybercriminals,…
-
Intel Wrap – September 2025
This month focuses on the Racoon0635 Phishing Service, Interpol’s Operation Contender, and the LightHouse and Lucid Phishing-as-a-Service Platforms. Microsoft’s Digital Crime Unit Puts a Halt On Racoon 0635 Activities Microsoft’s Digital Crimes Unit (DCU) successfully disrupted RaccoonO365, a rapidly growing cybercrime tool used to steal Microsoft 365 usernames and passwords. Summary Acting under a court…
-
Intel Wrap – August 2025
This month focuses on the ShadowCaptcha Campaign targeting WordPress sites, INTERPOL’s Operation Serengeti 2.0, and the PipeMagic RansomExx Malware exploiting a Microsoft Windows Vulnerability. Compromised WordPress sites exploited by ShadowCaptcha ShadowCaptcha, first detected in August 2025, has so far exploited over 100 compromised WordPress sites to deliver stealers, ransomware, and crypto miners. Summary Visitors to…