Securing Digital Transformation: Lessons from the February 2024 Ransomware Attack on Malawi's Immigration Service

Abstract

Malawi's public sector is digitizing rapidly to improve services, yet most departments lack basic cybersecurity foundations to protect sensitive data. Immigration systems hold highly confidential citizen and traveler records, making them prime targets where phishing, ransomware, and data breaches could cause serious harm and disrupt operations. This paper examines the most common cyber threats relevant to Malawi's Immigration Service, alongside real-world constraints such as limited budgets, outdated infrastructure, and gaps in staff awareness that weaken defenses. Drawing on global cybersecurity frameworks and regional best practices, it identifies practical protections that require minimal funding but deliver strong results. The proposed measures focus on training, policy, and operational hygiene rather than expensive tools. The findings confirm that awareness combined with simple, consistent security controls delivers the greatest impact and protection, especially in resource-constrained public-sector environments.