34 CYBER CRIME & CYBER SECURITY TRENDS IN AFRICA Figure 11. Top 10 Attacks Targeting Africa—2016 300  EMicrosoft Windows .lnk file code execution (LNK_MsWin_Code_Execution) 255 Event Count (Thousands) 250 200  Fake Scan Webpage  Generic W32.Mabezat Attack 202  Fake Scan Webpage Attack 186  Malicious JavaScript Redirection 150  Fake Browser Update 129  Mass Injection Website 100 90 88 80 75 50  Nuclear Exploit Kit Redirect 73 64  Malicious File Download Request  Bash CGI Environment Variable CVE-2014-6271 Attack 0 Of note during the reporting period, Symantec observed that nearly one in three global Generic W32. Mabezat Attacks targeted Africa (see Figure 12). This event indicates detection of activity from one of the W32.Mabezat families of worms. W32.Mabezat2 is a worm that spreads through email, removable drives, and network shares that are protected by weak usernames and passwords. It can also infect executable files and encrypts data files, such as PDF, TXT, and Microsoft Office files, on the infected system. The Mabezat worm spreads by using spam emails with malicious attachments. 2 http://www.symantec.com/security_response/writeup.jsp?docid=2007-120113-2635-99