By Israel Goodnews,
NAIROBI, Kenya- The recent unveiling of the iPhone 16 Pro and Pro Max has once again highlighted the critical intersection of technology and security.
Amidst the excitement over these advanced devices, it is essential to address a common misconception in the Kenyan consumer market: the belief that iPhones are immune to hacking compared to Android devices.
This notion, often based more on hearsay than facts, overlooks the complex and ever-evolving landscape of cybersecurity. Apple’s iOS is widely praised for its robust security features, yet no device is completely invulnerable.
Cybersecurity extends far beyond the protective measures of any operating system. Hackers continuously refine their techniques, seeking vulnerabilities in every new update to exploit.
While the iPhone’s security is formidable, it is not a foolproof shield against all cyber threats. One of the most prevalent threats is phishing. This tactic involves deceptive emails or messages designed to trick users into clicking malicious links.
These links can install malware or steal sensitive information, affecting any mobile operating system. The common thread is that phishing exploits human behavior rather than flaws in the operating system itself.
Vigilance is essential for all users to avoid falling victim to such scams. Cyber threats often originate from sources outside the device’s operating system. Websites offering free music, movies, or software frequently host malware.
In Kenya, for example, music piracy is a significant issue, with many Kenyans using piracy sites to access music. This not only undermines copyright enforcement agencies like MCSK but also exposes users to risks.
Similarly, sites offering pirated movies are common in Kenya and can harbor malicious code.
Even seemingly reputable websites can display ads from scammers, triggering automatic downloads of malware or trackers.
To mitigate these risks, using a trusted antivirus program is crucial. While Windows Defender has made strides, some sophisticated malware requires specialized antivirus software for effective detection and removal.
Cybersecurity encompasses more than just software and device protection; physical security breaches can also pose significant risks. Mobile banking, while convenient, can be hazardous when used over unsecured networks.
The advent of Wi-Fi in matatus and buses in Kenya, though a smart marketing move, can be detrimental if users are not cautious.
Numerous cases have been reported at locations like the National Archives where Kenyans have been defrauded while conducting transactions over unsecured public Wi-Fi. Public networks are prime targets for cybercriminals who can intercept banking credentials and drain accounts.
Thankfully, some institutions, such as Safaricom’s M-Pesa, have implemented safeguards to prevent transactions over public networks, reducing the risk of theft.
The debate between banking apps and USSD codes continues. While banking apps offer a sleek user interface, USSD codes, though less visually appealing, provide a more secure method for transactions.
They are less susceptible to cyber threats and do not require downloading potentially risky applications.
In a context where cybersecurity is paramount, using USSD codes can be a worthwhile trade-off for enhanced security.
However, users should also be wary of prying eyes; slight head tilts or peeking by passengers in buses or matatus can compromise credentials, as USSD methods do not encrypt the password being entered. Hacking extends beyond the digital realm.
The outdated stereotype of a hacker as a shadowy figure behind a computer ignores the very real physical threats. Criminals often observe individuals entering their M-Pesa PINs in public spaces like buses and matatus, using this information to steal funds.
A notable case from 2017 involved prison officials and inmates using cellphones to hack M-Pesa networks, demonstrating that physical security breaches can occur with minimal technology.
Additionally, caution is necessary with seemingly innocuous gadgets offered during meetings or social events.
Recent controversies have heightened Kenyans’ skepticism about their data security, particularly as the government has sought to identify instigators of demonstrations.
Devices that resemble thumb drives or chargers can contain hidden chips designed to capture and transmit data.
These devices can install malware on computers or smartphones, compromising passwords and sensitive information.
Such devices could be offered during meetings or even involve swapping personal gadgets like chargers during brief moments of inattention. In conclusion, Kenya is experiencing a technological surge, evidenced by its high ranking in the global innovation index and substantial internet user base.
As Kenya continues to advance technologically, users must adopt a comprehensive approach to cybersecurity. This includes being wary of phishing attempts, avoiding risky websites, using reliable antivirus software, and exercising caution with mobile banking and physical security threats.
By being proactive and informed, Kenyans can better protect themselves in this rapidly evolving digital landscape.
The writer, Israel Goodnews is an IT Professional and a Good Governance Advocate.
