Kenya has experienced a sharp rise in malware attacks, despite an overall decrease in cyber threats across the country. According to the latest cybersecurity report from the National Kenya Computer Incident Response Team Coordination Centre (National KE-CIRT/CC), malware attacks skyrocketed to over 33 million attempts between January and March 2024, a staggering 151% increase from the previous quarter. These attacks have primarily targeted critical infrastructure, government systems, and vulnerable individuals, with a particular focus on exploiting Internet of Things (IoT) devices that often lack robust security features.

Interestingly, while malware incidents have surged, the overall number of cyber threats in Kenya has actually declined by 24.83%, dropping from 1.2 billion in the last quarter of 2023 to 900 million in early 2024. This decline can be attributed to enhanced cybersecurity measures and awareness, although the surge in malware indicates that cybercriminals are becoming more sophisticated in their methods.

The National KE-CIRT/CC also reported a significant decrease in the number of digital investigation requests, which fell from 2,388 to 1,287 in the same period. This suggests that while the volume of cybercrime investigations has lessened, the complexity of the attacks being launched—particularly malware and ransomware—has intensified.

Social media platforms such as Facebook, X (formerly Twitter), and TikTok have become key channels for cybercriminal activities in Kenya. These platforms are being used to spread malware, carry out phishing schemes, and engage in data theft. There is also a growing concern over the use of social media for radicalization and financial fraud, with cybercriminals exploiting users' personal data for monetary gain.

In response to the rising threats, the National KE-CIRT/CC issued over 8.5 million security advisories to help businesses and individuals defend themselves against these attacks. However, the report emphasizes that the cybersecurity landscape in Kenya remains volatile, urging government agencies, businesses, and individuals to adopt more advanced security measures.

The rapid adoption of digital services in Kenya, including the increased use of IoT devices, has exposed new vulnerabilities that cybercriminals are exploiting. Experts have called for increased public-private collaboration in cybersecurity, along with regular updates to security protocols, to effectively counter the ever-evolving threat landscape.