NITDA to add domain security checks as cyberattacks hit 4,361 weekly

Nigerian organisations dey hit by average of 4,361 attempted cyberattacks every week, according to Check Point Research figures wey dem cite for one cybersecurity webinar on Sunday. The global average na about 2,270, meaning say a typical Nigerian organisation dey face nearly twice as many attempts.

Adesola Akinsanya, president of the Nigeria Internet Registration Association (NiRA), wey dey run the country's .ng domain registry, share the figures. The webinar focus on the Domain Name System (DNS), the internet's address book, wey dey turn website names into the numerical addresses wey computers dey use.

When attackers tamper with that system, a person fit type correct web address and still land on fake site wey dem build to steal passwords or payment details. The protection against this na DNSSEC, short for Domain Name System Security Extensions, wey dey add digital signatures so a browser fit check say a site's address record na genuine.

Why e matter for your money

Akinsanya cite Nigeria Inter-Bank Settlement System (NIBSS) data wey show say digital payment fraud stand at ₦25.85 billion in 2025. He warn say fewer reported incidents fit mean under-reporting rather than better security.

"DNS security no be technical hobby. E be economic question," he talk.

For everyday Nigerians, a hijacked domain fit mean fake bank or government page wey look real, disrupted access to services, or lost trust in paying online. The National Information Technology Development Agency (NITDA) now plan to include DNS security in the cybersecurity assessments wey e dey run on Ministries, Departments and Agencies (MDAs).

NITDA Director-General Kashifu Inuwa Abdullahi, wey Oluwasegun Falayan represent, talk say owning a government domain no longer enough on its own.

"E no enough to just have a domain, but e must be secured and must be signed," he talk.

The agency also want government websites on the .gov.ng domain to adopt DNSSEC.

Adoption still low

Only 15 of Nigeria's 164 accredited registrars don adopt DNSSEC, Akinsanya talk, and call the number inadequate. He urge organisations to check who dey control their domain accounts, turn on multi-factor authentication and get clear plan for unauthorised changes to domain records.

He also caution say DNSSEC no be cure-all. E no dey encrypt traffic, stop denial-of-service attacks or protect against stolen registrar logins, and a badly configured setup fit make a site unreachable for some users.

Daniel Onyekpeze, wey head incident handling at the Nigeria Computer Emergency Response Team (ngCERT) under the Office of the National Security Adviser, propose an Executive Order wey go give DNSSEC Critical National Information Infrastructure status, wey go cover banks as well as government.

SP Kuma Ikyereve of the Nigeria Police Force National Cybercrime Centre talk say phishing na the leading category of cases wey dem report, while Lateef Hamzat of CyberPlural talk say attacks dey shift from individuals to whole systems.

Wetin go happen next: NITDA talk say DNS security go now form part of im assessments of government agencies. NiRA dey target 30 per cent growth in .ng registrations but talk say e no go expand without adequate security standards.