The Communications Authority of Kenya attributes the continued high volumes to persistent system vulnerabilities.
Other categories of attack that featured prominently included distributed denial of service and assaults on mobile applications.
The number of cyberattacks detected against Kenyan institutions rose 28 per cent in the three months to September 2025 compared to a similar period last year, pointing to renewed aggression by cybercriminals exploiting artificial intelligence (AI) to automate and scale attacks on critical information infrastructure.
Analysis of fresh data released by the Communications Authority of Kenya (CA) shows that detected threats increased to 842.3 million during the quarter under review, up from 657.8 million recorded during the period between July and September last year.
