As South African businesses become increasingly reliant on digital platforms, the risks associated with cybercrime continue to grow at an alarming rate. According to a recent survey by the Council for Scientific and Industrial Research, 88% of local businesses suffered at least one security breach in the past year[1]. Even more concerning is that 90% of affected organisations were targeted multiple times.
The biggest current cyber threats, according to Jason Mellow, Head of Broker Distribution at Miway, are malware and phishing attacks[2]. “Not only do these attacks leave businesses vulnerable to financial loss and reputational damage; they can also cause major operational disruptions and potential legal liabilities.”
In light of Safer Internet Day on 11 February 2025, Miway is raising awareness about the importance of being vigilant online. To help businesses strengthen their cyber defences, Mellow shares key focus areas:
Many cyberattacks begin with a simple link, often disguised in emails or messages that appear legitimate. Clicking on an unsafe link, however, can expose businesses to malicious software, enabling cybercriminals to access sensitive information.
“Always verify links before clicking on them. Check for a padlock icon next to the web address, indicating a secure site,” advises Mellow. “A simple hover over a hyperlink can reveal its true destination. If in doubt, type the web address manually or use a bookmarked link.”
He adds that secure websites will have URLs that match the official domain name of the organisation. “For example, a legitimate Miway link would follow the format 'miway.co.za' rather than a misleading variation such as 'miway-secure.com'.”
Phishing remains one of the most effective cyber threats, as scammers impersonate legitimate organisations to trick victims into revealing sensitive information.
“Most large and well-established companies won’t send emails from private domains such as Gmail or Yahoo,” Mellow explains. “Be cautious of unsolicited messages requesting personal details, even if they appear to come from familiar sources. Always double-check the sender’s email address and avoid downloading attachments from unknown sources.”
Cybercriminals often play on urgency often tricking victims into quick actions. Slowing down and thinking critically before clicking can help businesses avoid falling prey to phishing scams.
Weak passwords are a major security vulnerability. A single compromised password can provide hackers with access to an entire system, so using the same password across multiple accounts increases this risk.
“A strong password is your first line of defence,” says Mellow. “Use passphrases or memorable combinations of letters, numbers, and special characters. Enabling multi-factor authentication (MFA) adds an extra layer of security, making it harder for cybercriminals to access your accounts.”
Businesses should also consider using password managers to generate and store complex passwords securely. Keeping email accounts protected is crucial, as email breaches can grant hackers access to multiple business platforms.
As Safer Internet Day approaches, Mellow urges businesses to make cybersecurity a priority. “Cybersecurity is not just an IT issue; it’s a business imperative,” he stresses. “By implementing basic security measures and fostering a culture of cyber vigilance, South African businesses can significantly reduce their exposure to threats.”
[2] https://www.csir.co.za/csir-issues-national-survey-results-on-state-cybersecurity-south-africa