Ethio Cyber

07/09/2026

🚨 CYBER THREAT ALERT | Lazarus Group Moves $30M Through Hyper liquid

💰 More than $30 million in cryptocurrency linked to North Korea’s Lazarus Group has reportedly moved through Hyper liquid in recent weeks, according to blockchain intelligence reported by Coin telegraph and other security/crypto researchers.

🔎 What happened?

Blockchain analysis associated the activity with wallets previously linked to Lazarus Group, a North Korean state-linked threat actor known for major cyber theft operations.

The reported flow involved:

➡️ Bitcoin moved through the Hyperliquid ecosystem

➡️ BTC converted into assets including ETH and SOL

➡️ Funds subsequently routed across blockchain networks and cryptocurrency exchanges

➡️ More than $30 million was identified in the recent activity

Importantly, the reporting does not establish that Hyperliquid itself was hacked or exploited. The issue is the apparent use of its infrastructure by wallets linked to a sanctioned threat actor.

🏦 ETHIOPIAN BANKING & FINTECH LESSON

Banks and digital-payment providers in Ethiopia should consider whether their monitoring capabilities can detect:

🔴 Transactions involving sanctioned/high-risk entities

🔴 Suspicious crypto-related payment patterns

🔴 Rapid movement through multiple accounts/wallets

🔴 Mule-account behavior

🔴 Unusual cross-border transactions

🔴 Fraud proceeds moving through digital channels

🔴 Exposure to high-risk exchanges or virtual-asset service providers

A traditional fraud-monitoring system may identify the initial transaction but fail to understand the full movement of funds across multiple digital ecosystems.

🛡️ EthioCyber Recommendation

Financial institutions should strengthen the combination of:

AML + Fraud Monitoring + Cyber Threat Intelligence + Sanctions Screening + Blockchain Intelligence

The objective should not simply be:

“Did this transaction look suspicious?”

but:

“Where did the money originate, where is it going, who controls the destination, and is it connected to a known threat actor or sanctioned ecosystem?”

📌 Key takeaway

The Lazarus case is another reminder that modern cyber risk is increasingly a financial-risk problem.

Cybersecurity teams, Fraud/AML teams, Risk Management and Compliance cannot operate in isolation.

Cyber threat intelligence must increasingly connect with financial transaction intelligence.

— EthioCyber | Cybersecurity • GRC • Risk • Threat Intelligence

🔗 Source: https://lnkd.in/gjpzKvEG

Follow,share,subscribe ያርጉን!!!

Ethio Cyber!!!

👉https://t.me/ethiocybert

👉https://lnkd.in/dhAgqaPW

👉https://lnkd.in/d5XbR5yv

👉https://lnkd.in/duAcaMhh

👉https://lnkd.in/d-5CBtzj

👉https://lnkd.in/dZNZxa9v

👉https://lnkd.in/d_6ttEKj

👉https://lnkd.in/ef2NEi3H

08/08/2026

🔴 ETHIOPIA’S CRITICAL INFRASTRUCTURE CYBERSECURITY LAW: A MAJOR MILESTONE FOR DIGITAL SECURITY
🇪🇹 Ethiopia has taken a major step toward strengthening national cybersecurity and digital sovereignty.
According to the Information Network Security Administration (INSA), the newly enacted Critical Infrastructure Cybersecurity Protection Proclamation No. 1426/2026 G.C. establishes a comprehensive legal framework to protect Ethiopia’s critical infrastructure against evolving cyber threats.
The proclamation identifies 12 critical infrastructure sectors, including:
🔹 Information & Communications Technology
🔹 Finance
🔹 Security & Public Safety
🔹 Transport
🔹 Education
🔹 Healthcare
🔹 Water & Energy
🔹 Government Services
🔹 Emergency Services
🔹 Agriculture
🔹 Trade
🔹 Industry
🔐 What organizations need to pay attention to
The proclamation introduces 18 mandatory cybersecurity obligations for critical infrastructure owners and operators, including:
✅ Cybersecurity strategies and policies
✅ Cyber risk assessments
✅ Cybersecurity audit certification
✅ Corrective actions for identified weaknesses
✅ Qualified cybersecurity professionals
✅ Supply-chain security
✅ Security Operations Centers (SOC)
✅ Cyber incident reporting
✅ Stronger protection of national and citizen information assets
One particularly important requirement is the reporting of cyber incidents to the National Computer Emergency Response Team (CERT) within 48 hours.
⏳ Organizations have a one-year grace period from publication of the proclamation to strengthen their organizational, human-resource and technological readiness.
💡 What this means for IT & Cybersecurity teams
This should not be treated simply as a compliance exercise.
For organizations operating critical infrastructure, now is the time to assess:
📌 Cybersecurity governance
📌 IT risk management
📌 Asset inventory and critical-system classification
📌 Vulnerability management
📌 Security monitoring & SOC capability
📌 Incident response and 48-hour reporting readiness
📌 Third-party/vendor cybersecurity
📌 Business continuity & disaster recovery
📌 Cybersecurity audit readiness
📌 Security policies, standards and procedures
📌 Cybersecurity skills and staffing
📌 Data protection and digital sovereignty
⚠️ What Happens If You Don't Comply? (Article 22) Financial Penalties:
500K – 1M Birr → Late framework implementation
1.5M – 2M Birr → Failure to report incidents within 48 hours
1.2M – 2M Birr → Providing services without a license
3× maximum fine → For repeat offenses
Criminal Penalties: (Article 25)
7–10 years in prison → For intentional violations that cause harm
Follow,share,subscribe ያርጉን!!!
Ethio Cyber!!!
👉https://t.me/ethiocybert
👉https://lnkd.in/dhAgqaPW
👉https://lnkd.in/d5XbR5yv
👉https://lnkd.in/duAcaMhh
👉https://lnkd.in/d-5CBtzj
👉https://lnkd.in/dZNZxa9v
👉https://lnkd.in/d_6ttEKj

02/07/2026

🚨 የሳይበር ማስጠንቀቂያ:

"Trust", "Google TV" እና "Known" መተግበሪያዎች የባንክ ሂሳቦችን እንዴት እያጠቁ ነው?

የኢትዮጵያ ንግድ ባንክ (CBE) በቅርብ ጊዜ "Trust"፣ "Google TV" እና "Known" የተባሉ አደገኛ የአንድሮይድ መተግበሪያዎች በቴሌግራም እና WhatsApp ላይ እየተሰራጹ መሆኑን አስታወቀ። ነገር ግን እነዚህ መተግበሪያዎች እንዴት የባንክ አካውንትን ሲያስከትሉ የቴክኒካል ሂደቱ ምንድን ነው?

ይህ ዓይነቱ በቴክኖሎጂ የታገዘ ጥቃት (Android Banking Trojan) በሚከተለው ዘዴ ይሰራል፡

1️⃣ ማስተላለፍ እና ማስነሳት (Social Engineering): ሃከሮቹ በChrome፣ Telegram ወይም WhatsApp ላይ "ነፃ የኢንተርኔት ምግብ" ወይም "አዲስ ፊልም" በሚሉ ስም ግዢ ያለውን ሊንክ ይላካሉ።

2️⃣ ውጭ ከሆኑ ምንጮች መጫን (Sideloading): እንደ Google Play Store ያልሆኑ ምንጮችን (Third-party) በመጠቀም መተግበሪያውን ሲያወርዱ አንድሮይዱ የማህደር (Malware) ተፈቃድ እንዲሰጥ ያደርጋል።

3️⃣ የተደራሽነት አገልግሎትን መጠቀም (Accessibility Service Exploit): ይህ ዋናው የጥቃቱ ስርዓት ነው። መተግበሪያው ለሰው ያለውን የእይታ ችግር ለመፍታት እንደሚለመድ ይመስላል፣ ነገር ግን በእውነቱ ሁሉንም የስክሪን ንብረት እና የቁልፍ ጫንቃዎችን (Keystrokes) ለማንበብ ይጠቀማል።

4️⃣ የማይሰራ ገጽ/ሽፋን ጥቃት (Overlay Attack): ተጠቃሚው ንግድ ባንክ ወይም ቴሌብር ሲከፈት፣ ማህደሩ በፍጥነት የባንኩን እውነተኛ መግቢያ የሚመስል ስውር ሽፋን ያዘላል። ተጠቃሚው ፒን (PIN) እና የይለፍ ቃል ሲጻፍ ማህደሩ በመስቀል ይወስዳል።

5️⃣ ገንዘብ ማስወገድ: ያገኘውን መረጃ በመጠቀም ከተጠቃሚው ፈቃድ አልባ ገንዘብ ወደ ሌሎች አካውንቶች ይዛወራል።

🛡️ የመከላከል እርምጃዎች:

✔️ ከPlay Store ውጭ ማንኛውንም መተግበሪያ አይጫኑ።

✔️ ከቴሌግራም/WhatsApp የሚመጡ አስገራሚ ሊንኮችን አይክፈቱ።

✔️ በስልክዎ 'Settings > Accessibility' ውስጥ ያልታወቀ መተግበሪያ ቢኖር ወዲያውኑ ያጥፉት።

✔️ በሞባይል ባንክን ላይ የፊት አዝማሚያ (Biometric) ከፒን (PIN) ጋር በማጣመር ይጠቀሙ።

ለሌሎች ማህበራዊ ሚዲያዎች ያካፍሉ—ብዙ ሰዎች እስከአሁን ይህንን አደጋ አላወቁም!

Follow,share,subscribe ያርጉን!!!

Ethio Cyber!!!

👉https://t.me/ethiocybert

👉https://lnkd.in/dhAgqaPW

👉https://lnkd.in/d5XbR5yv

👉https://lnkd.in/duAcaMhh

👉https://lnkd.in/d-5CBtzj

👉https://lnkd.in/dZNZxa9v

👉https://lnkd.in/d_6ttEKj







#የሳይበርደህንነት

30/06/2026

🚨 🇺🇸 አሜሪካ ስለ ሩሲያ የመንግስት ድጋፍ ያላቸው ሃከሮች መረጃ ለሚያቀርብ 10 ሚሊዮን ዶላር ሽልማት አቀረበች

US Offers $10M Bounty for Russian State Hackers

የአሜሪካ መንግስት በሩሲያ መንግስት ድጋፍ እንደሚደረግላቸው በሚጠረጠሩ ሁለት የሳይበር ጥቃት ቡድኖች ላይ ትልቅ እርምጃ ወስዷል። መንግስቱ የUNC5792 እና UNC4221 በሚል የተሰየሙ የጠለፋ ቡድኖችን ለመለየት ወይም ያሉበትን ቦታ ለማወቅ የሚያስችል መረጃ ለሚያቀርብ ሰው እስከ 10 ሚሊዮን ዶላር የሚደርስ ሽልማት አስታውቋል።

ይህ ሽልማት በአሜሪካ የውጭ ጉዳይ መሥሪያ ቤት በሚተዳደረው "Rewards for Justice" ፕሮግራም ስር የተገለጸ ሲሆን፣ በአሜሪካ ብሔራዊ ደህንነት ላይ የሚደረጉ የሳይበር ስለላ እና ጥቃቶች ምን ያህል ከባድ እንደሆኑ ያሳያል።

በሪፖርቶች መሠረት ሁለቱ ቡድኖች የአሜሪካ መንግስት ባለስልጣናትን፣ የጦር ኃይል አመራሮችን እና የአጋር ሀገራት ሰራተኞችን በመነጣጠር የስለላ ዘመቻዎችን ሲያካሂዱ ቆይተዋል። ይህም ስሜታዊ የመንግስት እና የመከላከያ መረጃዎችን ለማግኘት የተቀናጀ ጥረት መኖሩን ያመለክታል።

እነዚህ ጠላፊዎች በቅርብ ጊዜ በመልዕክት መላላኪያ መተግበሪያዎች ላይ ጥቃት ለመፈጸም የሚያስችሉ አዳዲስ ችሎታዎችን እያሳዩ መሆኑ ተገልጿል። እነዚህ መተግበሪያዎች ለመንግስታዊ እና ለወታደራዊ ግንኙነቶች ዋና መገናኛ መሣሪያዎች በመሆናቸው በጠላፊዎች ዒላማ ሆነዋል።

ምንም እንኳን የጥቃቱ ዝርዝር ቴክኒካዊ መንገዶች አልተገለጹም፣ እንደዚህ ዓይነት ጥቃቶች በተለምዶ የይለፍ ቃል ስርቆት፣ የተጠቃሚ ክፍለ ጊዜ (Session) መጥለፍ ወይም የማረጋገጫ ሂደቶች ድክመቶችን መጠቀምን ያካትታሉ።

ባለሙያዎች እንደሚገልጹት የእነዚህ ዘመቻዎች ተፅዕኖ ከመረጃ ስርቆት በላይ ሲሆን የስራ ደህንነት መጣስ፣ ሚስጥራዊ መረጃ መጋለጥ እና የግለሰቦች ደህንነት ላይ አደጋ ሊያስከትል ይችላል።

በዚህ ምክንያት ድርጅቶች የመልዕክት መላላኪያ ስርዓቶቻቸውን የማረጋገጫ ሂደቶች እንደገና እንዲገመግሙ፣ ባለብዙ-ደረጃ ማረጋገጫ (MFA) እንዲያነቃቁ እና ያልተለመዱ የመግቢያ እንቅስቃሴዎችን በቅርብ እንዲከታተሉ ተመክሯል።

የ10 ሚሊዮን ዶላር ሽልማቱ አሜሪካ እነዚህን የሳይበር ስለላ ተግባራት ለማቋረጥ ምን ያህል ቅድሚያ እንደሰጠች ያሳያል። ባለሥልጣናትም ይህ ሽልማት ከቡድኖቹ ጋር የተያያዙ ሰዎች ጠቃሚ መረጃ እንዲያቀርቡ ሊያበረታታ እንደሚችል ያምናሉ።

Follow,share,subscribe ያርጉን!!!

Ethio Cyber!!!

👉https://t.me/ethiocybert

👉https://lnkd.in/dhAgqaPW

👉https://lnkd.in/d5XbR5yv

👉https://lnkd.in/duAcaMhh

👉https://lnkd.in/d-5CBtzj

👉https://lnkd.in/dZNZxa9v

👉https://lnkd.in/d_6ttEKj

















#የሳይበርደህንነት

02/06/2026

💡 Cyber Security Tip of the Day

⚡ከአደገኛ የመረጃ ደላሎች (Data Brokers) ጀርባ ያለው እውነታ

የሰባት ሚሊዮን አረጋውያንን የግል መረጃ ለዓለም አቀፍ አጭበርባሪዎች በመሸጥ ጥፋተኛ የተባለው የሰሜን ካሮላይናው ነዋሪ በቅርቡ በ10 ዓመት እስራት መቀጣቱ አንድ ትልቅ እውነታን ያሳየናል፦ መረጃ (Data) ለማህበራዊ ምህንድስና (Social Engineering) ጥቃቶች ዋነኛው መሳሪያ ነው።
የሳይበር ወንጀለኞች አብዛኛውን ጊዜ የሚያጠቁትን ሰው ዝርዝር ራሳቸው አይፈጥሩም። ይልቁንም በተለይ በቀላሉ ሊታለሉ የሚችሉ የህብረተሰብ ክፍሎችን (እንደ አረጋውያንን) ለይተው መረጃዎችን አሽገው በሚሸጡ የ"Dark Web" ገበያዎች እና ህገ-ወጥ የመረጃ ደላሎች ላይ ይተማመናሉ።
🛡️ እንደ ሳይበር ባለሙያ ምን እንረዳለን?
1️⃣የታለመ ጥቃት (Targeted Demographics)፦ አጥቂዎች የማጭበርበሪያ ስልታቸውን ይበልጥ እውነተኛ ለማስመስል የታለሙ መረጃዎችን (ስም፣ ዕድሜ፣ ስልክ ቁጥር፣ አድራሻ) ይገዛሉ።
2️⃣ የመረጃ አስተዳደር (Data Governance) አስፈላጊነት፦ የመረጃ ግላዊነትን መጠበቅ የድርጅቶች ህጋዊ ግዴታ ብቻ ሳይሆን የሰዎች ደህንነት ጉዳይም ጭምር ነው። ቁጥጥር የማይደረግበት ወይም የተሰረቀ መረጃ ለዓለም አቀፍ ማጭበርበር ስርአት እንደ ነዳጅ ያገለግላል።
3️⃣ቅድመ-መከላከል፦ እንደ ሳይበር ደህንነት ባለሙያ፣ ማህበረሰባችንን እና ቤተሰቦቻችንን ስለ መረጃ አያያዝ እና ግላዊነት ማስተማር ይኖርብናል። ዲጂታል አሻራችንን መቀነስ አጥቂዎች እኛን በቀላሉ እንዳያገኙ ያደርጋል።

Follow,share,subscribe ያርጉን!!!
Ethio Cyber!!!

👉https://t.me/ethiocybert
👉https://lnkd.in/dhAgqaPW
👉https://lnkd.in/d5XbR5yv
👉https://lnkd.in/duAcaMhh
👉https://lnkd.in/d-5CBtzj
👉https://lnkd.in/dZNZxa9v
👉https://lnkd.in/d_6ttEKj

30/04/2026

❗❗❗
Hi everyone,
Today I have received a suspicious message from a recruiter named Phoebe R, which appears to be a scam. After searching online, I found multiple warnings about Phoebe R, and didn't even find her account or anything about the company she's promoting confirming that this is indeed a scam.
⚠️ Do NOT engage with this individual
⚠️ Do NOT click on any link she send
⚠️ Do NOT register on any platforms they promote
⚠️ Do NOT share any info about yourself
Think twice before clicking on any links or proceeding further

follow,share,subscribe ያርጉን!!!
👉https://t.me/ethiocybert
👉https://www.linkedin.com/company/108010626/admin/dashboard/
👉https://www.youtube.com/
👉https://www.instagram.com/ethio_cybertech/
👉https://tiktok.com/
👉https://linktr.ee/Ethiocyber
👉https://t.me/ethiocybercall

16/04/2026

16/04/2026

🚨ለአርቲስ ዶ/ር ቴውድሮስ ካሳሁን አድናቂዎች ፈተና (Challenge)

🚨🚨 አስቸኳይ ጥሪ – 4 ሰዓት ብቻ ቀርቷል! 🚨🚨

🚨 ሀሰተኛ AI ሙዚቃን መስማት እናቁም 🚨

በዩቲዩብ ላይ AI በመጠቀም የቴዲ አፍሮን ድምጽ በማምረት የውሸት ሙዚቃ ተለቅቋል!

❌ ይህ እውነተኛ ሙዚቃ አይደለም!
❌ ከቴዲ አፍሮ ጋር ምንም ግንኙነት የለውም!
✅ እውነተኛው ሙዚቃ ዛሬ ምሽት 8፡00 ላይ ከቴዲ አፍሮ ኦፊሻል ቻናል ብቻ!

🎯 MISSION (START NOW):
1️⃣ ወደ YouTube ግባ
2️⃣ ሀሰተኛ ቪዲዮዎችን ፈልግ
3️⃣ Report አድርግ (Spam / Impersonation)
4️⃣ ኮሜንት አድርግ:

👉 “this is AI not official Teddy Afro music”

⏰ እውነተኛው ሙዚቃ ዛሬ ሚያዚያ 8 ቀን 8:00 ሰዐትይወጣል!!!

💪 እንተባበር – አርቲሳችንን እንደግፍ!!

❤️ እውነተኛውን እንደግፍ!!!

official Teddy Afro page

https://web.facebook.com/TeddyAfroMusic
https://www.youtube.com/

follow,share,subscribe ያርጉን!!!

👉https://t.me/ethiocybert
👉https://www.linkedin.com/company/108010626/admin/dashboard/
👉https://www.youtube.com/
👉https://www.instagram.com/ethio_cybertech/
👉https://tiktok.com/
👉https://linktr.ee/Ethiocyber
👉https://t.me/ethiocybercall

# Teddy Afro
Afro