How mobile-money phishing adapts to local languages
A breakdown of regional SMS-phishing kits and the tells that give them away.
TDSS AnalystsMay 2026 · 6 min
Jamii Salama Kidigitali
Tanzania Digital Security Solutions
We protect human rights defenders, journalists, institutions, and governments across the continent from the threats that follow power, data, and ambition.
- 6
- Integrated security services
- 24/7
- Incident response desk
- 3
- Languages supported
- Pan-African
- Threat-intel coverage
Live Threat FeedHIGHMobile-money credential phishing surge · East Africa
View Threat Dashboard →What We Do
Our Services
Intelligence-led defence
Our analysts track threats targeting African institutions, journalists and civil society, and turn that intelligence into controls you can act on this week.
- ✓Pan-African threat monitoring
- ✓Actor and campaign profiling
- ✓Prioritised, actionable advisories
24/7 incident response
When something goes wrong, a single desk takes ownership: triage, containment, forensics and recovery, in your language and your time zone.
- ✓Triage and containment
- ✓Digital forensics
- ✓Recovery and lessons learned
People and capacity
Security lasts when your people own it. We run cadre-specific training so teams can keep themselves safe long after we leave.
- ✓Role-based curricula
- ✓Hands-on simulations
- ✓Certificates you can verify online
Testing approaches
Choose how deep we go
01
White box
Full knowledge of systems and source. The deepest coverage, ideal for critical applications and pre-release reviews.
02
Grey box
Partial knowledge, such as a user account. A realistic view of what an insider or compromised account could reach.
03
Black box
No inside knowledge. We test as an external attacker would, from the internet inward.
What we deliver
Security services, end to end
Security audits
Independent review of policy, process and technical controls.
Vulnerability management
Continuous discovery, ranking and tracking of weaknesses.
Remediation support
Hands-on help closing the findings that matter most.
Threat hunting
Proactive search for attackers already inside your network.
Digital forensics
Evidence-grade investigation of devices, accounts and logs.
Security monitoring
Round-the-clock detection and alert triage.
Phishing simulations
Realistic campaigns that measure and improve staff resilience.
Secure configuration
Hardening of endpoints, cloud accounts and networks.
Policy and governance
Practical security policy that people actually follow.
Executive briefings
Plain-language risk reporting for boards and leaders.
Awareness programmes
Ongoing campaigns that build everyday security habits.
Reporting
Clear findings with evidence, severity and fix guidance.
Sector expertise
Security shaped by your sector
Government and public sector
Protecting citizen data, critical services and institutional communications.
Finance and mobile money
Defending payments, agents and customers against fraud and account takeover.
Telecommunications
Securing networks, subscriber data and the platforms millions depend on.
Civil society and media
Safeguarding defenders, journalists and sources from targeted surveillance.
Managed security
Security you do not have to staff alone
Detection and response
Monitoring and rapid response delivered by our analyst desk.
Virtual CISO
Senior security leadership on a part-time, predictable basis.
Penetration testing
Scoped, safe attack simulation with a clear remediation path.
Security consulting
Architecture, policy and programme advice for your context.
Compliance
Meet the standards that matter
Data protection
Readiness for the Tanzania Personal Data Protection Act and regional equivalents.
ISO/IEC 27001
Gap analysis and preparation for an information security management system.
PCI DSS
Scoping and controls for organisations that handle card payments.
SOC 2
Control design and evidence preparation ahead of an audit.
Assessments
Every layer, tested
Network penetration testing
Internal and external infrastructure.
Application security
Web, mobile and API testing.
Cloud security review
Configuration and identity posture.
Wireless assessment
Office and field network exposure.
Social engineering
Phishing, vishing and physical pretexts.
Red team exercise
Goal-driven, multi-stage adversary simulation.
Device and mobile review
Hardening of phones and laptops at risk.
Why TDSS
A security partner built for Africa
01
Intelligence-led
Every decision starts with real threat intelligence on the African landscape, not generic playbooks.
02
People-first
We protect the people behind the systems: defenders, journalists, institutions and teams.
03
Local and fast
Analysts who know your context, available in your language and your time zone.
04
Build lasting capacity
We train your people so resilience stays with you long after the engagement ends.
How we work
From assessment to resilience
- 1
Assess
We map your risks, exposure and the threats most likely to target you.
- 2
Protect
We harden systems, devices and habits with practical, prioritised controls.
- 3
Respond
Our incident response desk is on call around the clock when something goes wrong.
- 4
Train
We equip your team with the skills to stay secure on their own.
Who We Serve
Built for those most at risk
Human Rights Defenders
Surveillance, device compromise, and exposure of your contacts are daily risks. TDSS helps you operate safely in the field.
Learn more →Government Officials
Phishing, insider threats, and weak data-handling policy put citizen data and procurement at risk. TDSS hardens the public sector.
Learn more →Banking & Finance
Transaction fraud, social engineering, and compliance pressure threaten institutions and their customers alike.
Learn more →Mining & Extractives
Industrial cyber threats, OT security gaps, and espionage risk put operations and IP at stake.
Learn more →NGOs & Civil Society
Donor-data exposure, partner-communication interception, and grant-related fraud are persistent risks.
Learn more →Media & Journalists
Source protection, secure drop systems, doxxing prevention, and surveillance defence are mission-critical.
Learn more →Individuals
Password hygiene, safe browsing, mobile security, and scam awareness keep your money and identity safe.
Learn more →Private Sector
Endpoint security, employee awareness, and incident-response planning protect revenue and reputation.
Learn more →Latest Intelligence
From the TDSS desk
Securing devices before high-risk travel
A pre-departure checklist for defenders and journalists crossing borders.
TDSS Field TeamApr 2026 · 8 min
The state of OT security in African mining
What our 2026 sector assessment found about operational-technology exposure.
TDSS ResearchMar 2026 · 12 min
Case Studies
Outcomes that matter
Regional newsroom (anonymised)
- Challenge
- Reporters suspected their phones were under surveillance.
- TDSS intervention
- Forensic device review, secure-comms rollout, and staff training.
- Outcome
- Spyware removed; source-protection workflow adopted newsroom-wide.
Microfinance institution (anonymised)
- Challenge
- Rising transaction fraud and untested staff awareness.
- TDSS intervention
- Security audit plus a phishing-simulation campaign.
- Outcome
- Click-through on simulated phishing fell 71% within one quarter.
In the field
Activists Lab Africa: digital security training in action
Hands-on workshops that give activists and human rights defenders the skills to stay safe online, delivered together with partners such as AHRN. Includes the May 2024 exchange workshop for digital rights activists from East Africa, held in Dar es Salaam.
- Hands-on labs
- Online safety
- Digital defenders
Our partners
We work closely with institutions and companies across the region, including:
- AHRN
- Oxyfarm
FAQ
Questions we hear often
Who does TDSS work with?+
Government bodies, financial institutions, telecoms, media and civil society organisations across Africa.
Can you respond to an incident right now?+
Yes. Our incident response desk is staffed 24/7. Use the Report incident page and an analyst will pick it up.
Do you offer services in Swahili and French?+
Yes. Our services and training are delivered in English, Swahili and French.
Where do we start if we have no security programme?+
With a security assessment. It maps your risks and gives you a prioritised plan you can act on.
Ready to strengthen your security?
Talk to a TDSS analyst and find out where your organisation stands.