Leading cyber threats detected in Kenya: January - March 2026

Kenya’s digital landscape is facing an intense barrage of cyber activity, with over 3.3 billion threats detected between January and March 2026. This staggering figure highlights a complex security environment where automated systems and malicious actors are constantly probing for weaknesses.

Despite the high volume, there is a notable downward trend in overall activity, as the current numbers represent a 26.15 percent decrease compared to the final three months of 2025. This suggests that while the scale of attacks remains massive, the sheer frequency of attempts has cooled slightly since the end of the previous year.

The vast majority of these incidents are categorized as system attacks, which account for a dominant 3.23 billion cases. This category dwarfs all other forms of digital interference, followed distantly by malware attacks at 68.7 million cases and brute force attempts at 46.4 million.

Web application and distributed denial of service (DDoS) attacks also remain significant threats, though they occur at a lower frequency than direct system exploitations.

Mobile application attacks, while the least frequent at roughly 219,000 cases, represent a specialized niche of risk for the country’s mobile-first population.

Several critical factors are currently driving this heightened risk profile. Inadequate system patching remains a primary vulnerability, leaving doors open for known exploits.