Apple and Google Warn Kenyan Users Amid Global Spyware Threat
For Kenyan users, the threat of cyber-attacks isn’t just a distant, international headline—it’s a very real domestic issue, as seen by the recent breaches on eCitizen and the defacement of key government websites. Now, a new, highly sophisticated danger is being flagged by the world’s biggest tech companies.
Apple and Alphabet-owned Google have just issued a major, simultaneous round of cyber threat notifications, warning users—including those here in Kenya—that they may have been targeted by advanced, state-backed hackers
Apple confirmed that on December 2, they released a new wave of warnings. While the company remains tight-lipped about the exact number of users or the specific governments involved, they stated they have now notified users in over 150 countries since launching the alert program. Kenya, being a globally connected nation, is certainly included in this massive surveillance net.
A day later, Google issued its own focused alert. Google’s warnings specifically targeted users compromised by Intellexa spyware, naming a list of affected countries that includes two of Kenya’s neighbours in the broader African region: Angola and Egypt.
Google’s statement highlighted that this U.S.-sanctioned cyber intelligence company, which sells the notorious Predator spyware, is “evading restrictions and thriving,” successfully targeting “several hundred accounts” globally.
These warnings are not for general phishing; they are alerts for extreme, targeted attacks—the kind often aimed at high-value individuals such as:
- Journalists and Editors
- Human Rights Activists
- Politicians and Diplomats
- Senior Business Leaders
The fact that Angola and Egypt are named underscores the growing digital espionage focus on the African continent. This latest wave comes just months after Kenya’s own cybersecurity bodies, like the National KE-CIRT/CC, had to contain the November 2025 attacks on government portals. The new global alert confirms that sophisticated, well-funded actors are actively working to compromise digital infrastructure and individuals across the region.
As Citizen Lab’s researcher, John Scott-Railton, noted, these threat notifications are critical. They “impose costs on cyber spies” by exposing their activity and are “often the first step in a string of investigations” that can lead to real accountability.
For Apple users who receive a “Threat Notification,” or for any high-risk user in Kenya, experts recommend activating Lockdown Mode on your iPhone. For all users, ensure your operating systems and all apps are updated immediately. The best defense against these ‘zero-click’ attacks is a fully patched device.
