Kenya Threat Landscape Report 2024
Published On 06 Mar 2025
Enovise
Summary
The Kenya Threat Landscape Report, developed collaboratively by Enovise and SOCRadar, examines the cyber threat environment affecting Kenya — where public administration, information, and finance sectors collectively account for over 43% of observed incidents.
Analysis
Sector-Specific Targeting
Public administration, information, and finance sectors are the primary targets in Kenya's cyber threat landscape, collectively accounting for over 43% of observed incidents. This concentration underscores escalating dangers to essential infrastructure and monetary systems.
Geographical Focus
Kenya experiences substantial targeting, with 69.1% of threats directed solely at the country. Nevertheless, roughly 31% of assaults extend beyond Kenya's borders, demonstrating how threat actors operate across multiple regions.
Ransomware Threats
Manufacturing faces the greatest ransomware danger, representing more than a quarter of incidents. LockBit variations lead ransomware campaigns with approximately 23% combined prevalence.
Phishing Attacks
National Security and International Affairs experience the heaviest phishing pressure at 50%, while banking follows at approximately 21%. Attackers employ generic titles in 61.19% of phishing pages, with increasing emphasis on harvesting user login details and sensitive information. Roughly 57% of phishing domains now use HTTPS, while 43% rely on unencrypted connections.
Diverse Threat Activity
Data and database compromises are the most prevalent attack type (61.8%), followed by access-related threats (21.1%), and website disruptions (14.5%).
Related Resources
View Resources
Enovise Group and SOCRadar Partnership
Enovise joins forces with SOCRadar to deliver advanced Extended Threat Intelligence and Managed Detection & Response capabilities across Africa.
Garmin South Africa Hack
Customer payment card details, names, addresses and contact information stolen from the Garmin South Africa e-commerce platform — a case study in e-commerce data breach response.