How mobile-money phishing adapts to local languages
A breakdown of regional SMS-phishing kits and the tells that give them away.
TDSS AnalystsMay 2026 · 6 min
Jamii Salama Kidigitali
Tanzania Digital Security Solutions
Tunalinda watetezi wa haki za binadamu, waandishi wa habari, taasisi, na serikali kote barani dhidi ya vitisho vinavyofuatia mamlaka, data, na malengo.
- 6
- Huduma jumuishi za usalama
- 24/7
- Dawati la kukabiliana na matukio
- 3
- Lugha zinazotumika
- Pan-Afrika
- Ufuatiliaji wa vitisho barani kote
Mtiririko wa VitishoHIGHMobile-money credential phishing surge · East Africa
Tazama Dashibodi ya Vitisho →Tunachofanya
Huduma Zetu
Ulinzi unaoongozwa na intelijensia
Our analysts track threats targeting African institutions, journalists and civil society, and turn that intelligence into controls you can act on this week.
- ✓Pan-African threat monitoring
- ✓Actor and campaign profiling
- ✓Prioritised, actionable advisories
Kukabiliana na matukio saa 24
When something goes wrong, a single desk takes ownership: triage, containment, forensics and recovery, in your language and your time zone.
- ✓Triage and containment
- ✓Digital forensics
- ✓Recovery and lessons learned
Watu na uwezo
Security lasts when your people own it. We run cadre-specific training so teams can keep themselves safe long after we leave.
- ✓Role-based curricula
- ✓Hands-on simulations
- ✓Certificates you can verify online
Mbinu za majaribio
Chagua kina cha majaribio
01
White box
Full knowledge of systems and source. The deepest coverage, ideal for critical applications and pre-release reviews.
02
Grey box
Partial knowledge, such as a user account. A realistic view of what an insider or compromised account could reach.
03
Black box
No inside knowledge. We test as an external attacker would, from the internet inward.
Tunachotoa
Huduma za usalama, kuanzia mwanzo hadi mwisho
Security audits
Independent review of policy, process and technical controls.
Vulnerability management
Continuous discovery, ranking and tracking of weaknesses.
Remediation support
Hands-on help closing the findings that matter most.
Threat hunting
Proactive search for attackers already inside your network.
Digital forensics
Evidence-grade investigation of devices, accounts and logs.
Security monitoring
Round-the-clock detection and alert triage.
Phishing simulations
Realistic campaigns that measure and improve staff resilience.
Secure configuration
Hardening of endpoints, cloud accounts and networks.
Policy and governance
Practical security policy that people actually follow.
Executive briefings
Plain-language risk reporting for boards and leaders.
Awareness programmes
Ongoing campaigns that build everyday security habits.
Reporting
Clear findings with evidence, severity and fix guidance.
Utaalamu wa sekta
Usalama unaoendana na sekta yako
Government and public sector
Protecting citizen data, critical services and institutional communications.
Finance and mobile money
Defending payments, agents and customers against fraud and account takeover.
Telecommunications
Securing networks, subscriber data and the platforms millions depend on.
Civil society and media
Safeguarding defenders, journalists and sources from targeted surveillance.
Usalama unaosimamiwa
Usalama bila kuajiri timu nzima
Detection and response
Monitoring and rapid response delivered by our analyst desk.
Virtual CISO
Senior security leadership on a part-time, predictable basis.
Penetration testing
Scoped, safe attack simulation with a clear remediation path.
Security consulting
Architecture, policy and programme advice for your context.
Uzingatiaji
Fikia viwango muhimu
Data protection
Readiness for the Tanzania Personal Data Protection Act and regional equivalents.
ISO/IEC 27001
Gap analysis and preparation for an information security management system.
PCI DSS
Scoping and controls for organisations that handle card payments.
SOC 2
Control design and evidence preparation ahead of an audit.
Tathmini
Kila ngazi, imejaribiwa
Network penetration testing
Internal and external infrastructure.
Application security
Web, mobile and API testing.
Cloud security review
Configuration and identity posture.
Wireless assessment
Office and field network exposure.
Social engineering
Phishing, vishing and physical pretexts.
Red team exercise
Goal-driven, multi-stage adversary simulation.
Device and mobile review
Hardening of phones and laptops at risk.
Kwa nini TDSS
Mshirika wa usalama aliyejengwa kwa ajili ya Afrika
01
Unaoongozwa na intelijensia
Kila uamuzi huanza na taarifa halisi za vitisho vya mazingira ya Afrika, si mwongozo wa jumla.
02
Watu kwanza
Tunawalinda watu walio nyuma ya mifumo: watetezi, waandishi wa habari, taasisi na timu.
03
Wa hapa, na wa haraka
Wachambuzi wanaoelewa mazingira yako, wanaopatikana kwa lugha yako na saa za eneo lako.
04
Jenga uwezo wa kudumu
Tunafunza watu wako ili ustahimilivu ubaki nawe hata baada ya kazi kukamilika.
Jinsi tunavyofanya kazi
Kutoka tathmini hadi ustahimilivu
- 1
Tathmini
Tunapima hatari zako, mianya na vitisho vinavyoweza kukulenga zaidi.
- 2
Linda
Tunaimarisha mifumo, vifaa na mazoea kwa hatua za vitendo zilizopangwa kipaumbele.
- 3
Kabiliana
Dawati letu la kukabiliana na matukio liko tayari saa 24 jambo likienda vibaya.
- 4
Funza
Tunaipa timu yako ujuzi wa kujilinda yenyewe.
Tunaowahudumia
Imejengwa kwa walio hatarini zaidi
Watetezi wa Haki za Binadamu
Ufuatiliaji, uvamizi wa vifaa, na kufichuliwa kwa anwani zako ni hatari za kila siku. TDSS inakusaidia kufanya kazi salama.
Jifunze zaidi →Maafisa wa Serikali
Phishing, vitisho vya ndani, na sera dhaifu za data huhatarisha data ya raia na manunuzi. TDSS inaimarisha sekta ya umma.
Jifunze zaidi →Benki na Fedha
Ulaghai wa miamala, uhandisi-jamii, na shinikizo la utiifu huhatarisha taasisi na wateja wao.
Jifunze zaidi →Madini na Uchimbaji
Vitisho vya kidijitali vya viwanda, mianya ya usalama wa OT, na hatari ya ujasusi huhatarisha uendeshaji na miliki.
Jifunze zaidi →Mashirika ya Kiraia
Kufichuliwa kwa data ya wafadhili, kunaswa kwa mawasiliano ya washirika, na ulaghai wa ruzuku ni hatari za kudumu.
Jifunze zaidi →Vyombo vya Habari na Waandishi
Ulinzi wa vyanzo, mifumo salama ya kupokea taarifa, kuzuia doxxing, na ulinzi dhidi ya ufuatiliaji ni muhimu.
Jifunze zaidi →Watu Binafsi
Usafi wa nywila, kuvinjari salama, usalama wa simu, na kutambua ulaghai hulinda fedha na utambulisho wako.
Jifunze zaidi →Sekta Binafsi
Usalama wa vifaa, uelewa wa wafanyakazi, na mipango ya majibu ya matukio hulinda mapato na sifa.
Jifunze zaidi →Ujasusi wa Hivi Karibuni
Kutoka dawati la TDSS
Securing devices before high-risk travel
A pre-departure checklist for defenders and journalists crossing borders.
TDSS Field TeamApr 2026 · 8 min
The state of OT security in African mining
What our 2026 sector assessment found about operational-technology exposure.
TDSS ResearchMar 2026 · 12 min
Tafiti za Mifano
Matokeo yenye maana
Regional newsroom (anonymised)
- Changamoto
- Reporters suspected their phones were under surveillance.
- Hatua ya TDSS
- Forensic device review, secure-comms rollout, and staff training.
- Matokeo
- Spyware removed; source-protection workflow adopted newsroom-wide.
Microfinance institution (anonymised)
- Changamoto
- Rising transaction fraud and untested staff awareness.
- Hatua ya TDSS
- Security audit plus a phishing-simulation campaign.
- Matokeo
- Click-through on simulated phishing fell 71% within one quarter.
Kazini
Activists Lab Africa: mafunzo ya usalama wa kidijitali kwa vitendo
Warsha za vitendo zinazowapa wanaharakati na watetezi wa haki za binadamu ujuzi wa kujilinda mtandaoni, zikitolewa pamoja na washirika kama AHRN. Zinajumuisha warsha ya kubadilishana ya Mei 2024 kwa wanaharakati wa haki za kidijitali kutoka Afrika Mashariki, Dar es Salaam.
- Maabara za vitendo
- Usalama mtandaoni
- Watetezi wa kidijitali
Washirika wetu
Tunafanya kazi kwa karibu na taasisi na kampuni katika kanda, ikiwemo:
- AHRN
- Oxyfarm
Maswali
Maswali tunayoulizwa mara nyingi
Who does TDSS work with?+
Government bodies, financial institutions, telecoms, media and civil society organisations across Africa.
Can you respond to an incident right now?+
Yes. Our incident response desk is staffed 24/7. Use the Report incident page and an analyst will pick it up.
Do you offer services in Swahili and French?+
Yes. Our services and training are delivered in English, Swahili and French.
Where do we start if we have no security programme?+
With a security assessment. It maps your risks and gives you a prioritised plan you can act on.
Uko tayari kuimarisha usalama wako?
Zungumza na mchambuzi wa TDSS ujue taasisi yako iko wapi kiusalama.