NAIROBI, Kenya- As Kenya accelerates its digital transformation, a new front of challenges is emerging—cybercrime.
In just three months, the country witnessed a staggering 27.2 percent jump in cyber threats, totaling 840.9 million incidents during the second quarter of the 2024/2025 financial year, according to the Communications Authority of Kenya (CA).
While Kenya’s embrace of digital platforms has opened doors for innovation and economic growth, it has also widened the attack surface for cybercriminals, who are now exploiting both new and old vulnerabilities with increasing sophistication.
This alone accounted for nearly 90 percent of all detected cyber threats in the quarter.
“We’re seeing a dynamic shift in the way cybercriminals operate,” Jude Waikwa, a cybersecurity expert told Y News.
“It’s no longer just about brute force attacks. Now, attackers are focusing on loopholes in mobile apps and web platforms that millions of Kenyans use daily.”
Mobile and Web Under Fire
The rapid growth of mobile applications in Kenya has not gone unnoticed by hackers.
Mobile app attacks surged by 17.4 percent, a clear signal that cybercriminals are targeting the country’s increasing reliance on mobile technology—from banking apps to e-commerce platforms.
Similarly, web application attacks rose by 29 percent, raising concerns about the security of websites and online services, many of which handle sensitive user data.
On a more alarming note, Distributed Denial of Service (DDoS) attacks—where hackers flood a server with traffic to crash it—skyrocketed by 726.6 percent, totaling 15.1 million incidents. Such attacks have the potential to paralyze businesses, financial institutions, and even government services.
AI: The Double-Edged Sword
As Kenya races to integrate Artificial Intelligence (AI) into its systems, cybercriminals are also adopting AI to mount more sophisticated attacks.
According to CA, AI-driven cyber threats are on the rise, making traditional security measures less effective.
“AI can be a powerful tool for both good and ill,” said the expert. “It can help detect threats faster, but it also enables attackers to launch smarter, faster, and more targeted assaults.”
Government Response and The Road Ahead
In response, Kenya’s National KE-CIRT/CC (Kenya Computer Incident Response Team) ramped up efforts, issuing 11.6 million cybersecurity advisories—a 20.9 percent increase from the previous quarter.
These alerts help organizations and individuals stay informed and protected against emerging threats.
Despite these efforts, experts warn that the battle against cybercrime cannot be fought by government agencies alone.
Businesses, especially small and medium enterprises (SMEs), which often lack robust cyber defenses, are urged to take proactive steps.
“Cybersecurity is everyone’s business now,” said the expert. “The cost of complacency is simply too high.”
As Kenya continues to digitize services, from healthcare to financial transactions, ensuring cybersecurity resilience is becoming a national priority.
With threats evolving faster than ever, the question is not if another major cyber incident will occur, but when—and whether Kenya will be ready.
