The Kenyan businesses and institutions were on tenterhooks as global hacktivist group Anonymous had sent warning to the government over its recent opposition to citizens protesting freely against the #RejectFinanceBill2024.
The threat is a stark reminder of the massive Distributed Denial of Service (DDoS) attack on Kenya's government websites launched in August 2023. These attacks, attributed to Anonymous Sudan, were executed under the pretext of defending citizens' rights.
Last year’s attack targeted the country’s eCitizen portal, which provides access to over 5,000 government services, and disrupted critical online services, highlighting vulnerabilities in the nation's cybersecurity infrastructure.
“Anonymous Sudan has a history of targeting government websites and technology firms in various countries, including Sweden, Israel, and now Kenya. The group's latest threats to the Kenyan government underscore the urgent need for enhanced cybersecurity measures across the region,” John Paul Onyango, Country Manager: East Africa of Check Point® Software Technologies Ltd. said.
While the 2023 attacks have galvanised Kenyan businesses and Government institutions to revisit their cybersecurity defences and implement broad citizen awareness programmes of cyber-attacks and how to mitigate them, Onyango argues that closer attention needs to be paid to end-to-end cybersecurity practices.
According to recent threat intelligence reports from Check Point, organisations in Kenya are attacked on average 3,517 times per week, significantly higher than the African average of 2,462 attacks per organisation. Kenya was ranked in the top 20 most attacked countries globally during May 2024 in Check Point’s Top Malware threat report.
The leading malware threats in Kenya in the last month include FakeUpdates, Botnets, and various backdoors like Expiro and Floxif. Notably, 97% of malicious files in Kenya were delivered via email in the last 30 days. The most common vulnerability exploit type in Kenya is Information Disclosure, impacting 81% of organisations.
According to a recent article in Innovation Village, in light of cyber attacks in the last year, Kenya is poised to receive assistance in bolstering its cybersecurity defenses, thanks to pledges from major technology corporations. In May 2024, industry leaders such as Google and Microsoft announced their intentions to make significant digital investments in Kenya. These investments are not limited to financial contributions but also include collaborative efforts to enhance the country’s cybersecurity infrastructure.
The commitments from these tech giants are expected to provide a substantial boost to Kenya’s capabilities in defending against cyber threats. The support will likely encompass a range of cybersecurity measures, from advanced threat detection to improved security protocols, and may also involve training for Kenyan personnel to better manage and respond to cyber incidents.
While Kenya’s fintech sector is a driving force in the country’s economic transformation it faces growing challenges in securing its data centres and trading platforms, as well as migrating securely to the cloud. Solutions to address these problems should include ultra-scalable protection and compliance.
The prevalent mobile-first culture in Kenya has also led to the rapid development of income-generating applications. However, this focus on speed-to-market often comes at the expense of robust cybersecurity measures
No comments:
Post a Comment