Kenya’s rapid digital transformation has outpaced its national cybersecurity defenses, positioning the East African nation as a primary hub for mobile money fraud and infrastructure-targeted ransomware. This alarming conclusion forms the core of the Interpol African Cyberthreat Assessment Report 2026, which paints a complex picture of a country deeply integrated into the digital economy yet heavily exposed to sophisticated criminal syndicates.
The scale of digital aggression targeting Kenya is staggering. According to the Interpol findings, the nation recorded 46,786 Distributed Denial-of-Service (DDoS) attacks in just the first half of 2025. These malicious operations were aimed directly at the major telecommunications companies that millions of Kenyans depend on daily for communication, business, and financial transactions.
By utilizing multiple compromised devices to flood target servers with overwhelming internet traffic, cybercriminals repeatedly forced vital telecom services to slow down or completely crash offline. In addition to these network-level assaults, Kenya was also highlighted in global threat monitoring, appearing prominently in SOCRadar’s phishing detection data by September 2025.
Public sector networks faced an equally relentless barrage. The Communications Authority (CA) of Kenya flagged hundreds of millions of intrusion attempts targeting government systems and core ICT infrastructure within a single quarter. These attacks primarily utilized brute-force methods and system exploitation, systematically hammering digital defenses until security controls failed.
The audacity of these threat actors was vividly demonstrated on July 18, when the official website of the President was hacked and defaced. The attackers left a targeted message directed at President William Ruto alongside a ransom demand valued at approximately KSh 41 million in Bitcoin.
While large-scale infrastructure attacks dominate headlines, everyday citizens have faced an equally brutal wave of financial cybercrime. SIM swap fraud surged by an astonishing 327 percent over the course of 2025.
During this period, cybercriminals orchestrated the issuance of more than 123,000 fraudulent SIM cards. By seizing control of victims’ phone numbers, fraudsters successfully drained roughly USD 3.8 million directly from consumer mobile wallets, highlighting critical security gaps in subscriber verification processes.
When viewed within the broader regional context, Kenya’s struggles reflect a wider East African vulnerability. Neighboring Uganda made headlines after its Electricity Transmission Company (ETC) fell victim to a suspected ransomware attack, presenting a rare and dangerous threat to critical national power grids. Meanwhile, countries like Tanzania and Rwanda report similar patterns of SIM swap fraud, with local telecom providers continuing to struggle in implementing robust, real-time biometric verification systems.
Zooming out to the rest of the continent reveals distinct regional trends in cyber criminality: Southern Africa sees South Africa continue to dominate raw figures, accounting for 92 percent of all ransomware detections across the African continent due to its advanced digital infrastructure, while West Africa features countries like Nigeria and Cabo Verde remaining the epicenter of Business Email Compromise (BEC) scams and organized fraud networks, generating thousands of targeted financial losses.
Despite the broader continental landscape, Kenya’s specific threat metrics stand out within East Africa. Interpol emphasizes that individual national efforts will remain insufficient as long as criminal networks can bypass legal boundaries.
The report concludes with a stern warning: the absence of a unified regional cybercrime response mechanism has created jurisdictional gaps that agile criminal syndicates continuously exploit. Without coordinated cross-border intelligence sharing, harmonized legislation, and collaborative defense strategies, East African nations will struggle to secure their digital futures against increasingly sophisticated adversaries.
