The rapid expansion of the Philippines’ digital economy has made it an attractive target for cybercriminals.

Recent data from the Kaspersky Security Network (KSN) revealed an alarming trend — between October and December 2024, over 26.8 percent of Filipino users encountered web-borne cyberattacks.

This placed the country 17th globally for web-related threats, underscoring the urgent need for robust cybersecurity measures to protect businesses, individuals, and communities from the ever-evolving digital dangers.

Adrian Hia, Kaspersky’s managing director for Asia Pacific, stressed the critical importance of strengthening the nation’s cyber defenses, especially in light of a worrying shortage of cybersecurity professionals.

“This year is a chance for Filipinos to take charge of their online safety by building stronger defenses and staying one step ahead of cybercriminals. At the same time, we must focus on nurturing and developing local talent in cybersecurity to address this critical gap,” Hia said.

A report from the Department of Information and Communications Technology (DICT) painted a grim picture, citing low salaries as a significant deterrent for cybersecurity professionals considering government service.

As of 2022, the country had only 200 cybersecurity experts — starkly lagging behind Singapore’s 2,000. This shortage leaves the Philippines vulnerable to increasingly sophisticated cyberattacks, which continue to evolve in both complexity and reach.

In the final quarter of 2024, cybercriminals exploited browser vulnerabilities and deployed advanced social engineering tactics to breach systems. Kaspersky reported that file-less malware — malicious software that leaves no static trace on a victim’s device — is becoming an increasingly common weapon in their arsenal.

Compounding this challenge, local threats spread through offline methods, such as infected USB drives, affected 19.3 percent of users in the Philippines. This highlights the dual nature of the cybersecurity battle — one that must be fought both online and offline.

In response to the growing threats, Kaspersky urged enterprises and individuals alike to fortify their defenses. For businesses, regular software updates, data backups, and the establishment of a Security Operations Center (SOC) are crucial steps. Organizations are also advised to enforce stringent access controls, monitor network activity and train employees in cybersecurity awareness.

For consumers, simple but effective measures such as using strong passwords, enabling two-factor authentication, and avoiding suspicious links can go a long way in preventing cyberattacks. Limiting public Wi-Fi use and installing reliable security solutions further strengthen individual defenses against phishing, fraud and malware.