The Nigerian Computer Emergency Response Team (ngCERT) has reported a surge in ransomware attacks by the Phobos ransomware group targeting critical cloud service providers in Nigeria.

Phobos attackers gain access through phishing emails and exploiting the Remote Desktop Protocol (RDP) weaknesses. At-risk entities include providers serving government agencies, financial institutions, telecommunications, education, healthcare, and NGOs.