The Cyber Threat Landscape in East Africa: 2025 Report

East Africa's rapid digital transformation has brought extraordinary opportunity — and extraordinary risk. In 2024, our Security Operations Center monitored a 180% year-over-year increase in ransomware incidents targeting organizations in Kenya, Tanzania, Uganda, and Ethiopia. This report summarizes the key threat trends and the actions every organization must take now.

The dominant threat vector in 2024 was phishing — specifically, highly targeted spear-phishing campaigns that impersonated senior executives, tax authorities, and banking institutions. These attacks bypassed traditional spam filters because they were personalized, timely (often sent during tax filing periods or regulatory deadlines), and technically sophisticated.

Ransomware-as-a-Service (RaaS) groups increasingly targeted African organizations in Q3 and Q4 2024, recognizing that security maturity is lower and willingness to pay ransoms may be higher due to inadequate backup strategies. Manufacturing, logistics, and healthcare organizations were the most targeted sectors.

Business Email Compromise (BEC) remains a persistent threat, particularly in financial services and real estate. We observed a new pattern: attackers compromising a supplier's email account and then inserting fraudulent payment instructions into legitimate invoice threads — often for months before detection.

The most important actions organizations should take immediately: implement Multi-Factor Authentication (MFA) on all external-facing systems without exception; conduct quarterly phishing simulations with real consequences for failures; ensure offline backups are tested for restorability monthly; and deploy Endpoint Detection and Response (EDR) tools on all workstations and servers.

Looking ahead to 2025, we expect AI-powered attacks to increase significantly. Deepfake audio is already being used in CEO fraud attempts, and AI-generated phishing content is becoming indistinguishable from legitimate correspondence. Organizations that don't invest in security awareness training and next-generation detection tools will face escalating risk.