NAIROBI, Kenya June 30 – Kenya’s total cyberattacks increased by 201.7 percent to 2.5 billion threats between January and March 2025, up from 840.9 million recorded during the previous quarter (October and December last year).
The latest sector statistical report by the Communication Authority of Kenya (CA) attributes the surge in the attacks to system vulnerability threats among Kenyan firms, which rose from 752,441,233 to 2,470,257,079 threats during the first quarter of the year.
Web application attacks also rose by 11.8 percent from 4,542,939 threats recorded last year to 5,081,236 threats between January and March this year, underscoring the need to combat the rising risks in the country’s cybersecurity landscape.
“The number of cyber threats detected during the quarter increased by 201.7 per cent to 2.5 billion from 840.9 million threats reported last quarter,” CA stated.
Distributed denial of service (DDoS) attacks, however, reduced from 15.1 million threats recorded during the last quarter period of 2024 to 4 million threats this year.
Additionally, the report revealed reduced malware and brute-force attacks during the period under review.
Due to the rise in the number of cyber-attack threats, the Authority issued a total of 13.2 million advisories to Kenyan firms, an increase from 11.6 million advisories issued during the last quarter of 2024.
The advisories included malware, brute force attacks, distributed denial of service and mobile application attacks.
“A total of 13.2 million advisories were issued in response to the cyber threats detected, representing a 14.2 percent increase compared to 11.6 million advisories issued last quarter,” the report concluded.
According to CA, the ICT sector across the country demonstrated steady growth during the period between January and March 2025, marked by a general growth in active mobile subscriptions, mobile money subscriptions, mobile data and broadband subscriptions, mainly driven by effective customer retention campaigns.
