Cyber threats in Kyrgyzstan: attacks are not only technological, but also psychological manipulation

Kyrgyzstan is facing a rise in digital threats: in 2024, around 1,600 cybercrimes were reported, and experts believe that the actual number is much higher. At the Check Point Security Day 2025 conference in Bishkek, experts discussed how to protect the country from a new wave of attacks.

The main conclusion is that cyberattacks do not start with a computer, but with a person. Social engineering, phishing emails, and psychological manipulation remain the main tools of attackers, especially in the financial sector. According to BIS and Positive Technologies, more than half of successful attacks in 2024 began with the human factor, most often via email.

Modern artificial intelligence-based systems can detect threats and block them before they cause damage. Sergey Nevstruev, an expert on Check Point's Harmony Endpoint, demonstrated at the conference how such platforms help analyse user behaviour in real time, automatically block suspicious activity, and protect workstations from phishing, ransomware, and zero-day attacks.

Experts emphasise that technology is only part of the protection. To minimise risks, a digital security culture and increased public awareness are necessary. Key recommendations for users:

• Do not click on links in unfamiliar emails, even if they look like messages from a bank or delivery service.
• Use two-factor authentication.
• Update systems and programmes to close vulnerabilities.
• Check details before paying, especially in messengers.

The growth of digitalisation in Kyrgyzstan makes these measures critically important: any successful attack can lead to data leaks, business downtime, financial losses and reputational damage. Today, protection against cyberattacks is not only about numbers and technology, but also about the ability to resist human manipulation.