Ethio Cyber

08/08/2026

🔴 ETHIOPIA’S CRITICAL INFRASTRUCTURE CYBERSECURITY LAW: A MAJOR MILESTONE FOR DIGITAL SECURITY
🇪🇹 Ethiopia has taken a major step toward strengthening national cybersecurity and digital sovereignty.
According to the Information Network Security Administration (INSA), the newly enacted Critical Infrastructure Cybersecurity Protection Proclamation No. 1426/2026 G.C. establishes a comprehensive legal framework to protect Ethiopia’s critical infrastructure against evolving cyber threats.
The proclamation identifies 12 critical infrastructure sectors, including:
🔹 Information & Communications Technology
🔹 Finance
🔹 Security & Public Safety
🔹 Transport
🔹 Education
🔹 Healthcare
🔹 Water & Energy
🔹 Government Services
🔹 Emergency Services
🔹 Agriculture
🔹 Trade
🔹 Industry
🔐 What organizations need to pay attention to
The proclamation introduces 18 mandatory cybersecurity obligations for critical infrastructure owners and operators, including:
✅ Cybersecurity strategies and policies
✅ Cyber risk assessments
✅ Cybersecurity audit certification
✅ Corrective actions for identified weaknesses
✅ Qualified cybersecurity professionals
✅ Supply-chain security
✅ Security Operations Centers (SOC)
✅ Cyber incident reporting
✅ Stronger protection of national and citizen information assets
One particularly important requirement is the reporting of cyber incidents to the National Computer Emergency Response Team (CERT) within 48 hours.
⏳ Organizations have a one-year grace period from publication of the proclamation to strengthen their organizational, human-resource and technological readiness.
💡 What this means for IT & Cybersecurity teams
This should not be treated simply as a compliance exercise.
For organizations operating critical infrastructure, now is the time to assess:
📌 Cybersecurity governance
📌 IT risk management
📌 Asset inventory and critical-system classification
📌 Vulnerability management
📌 Security monitoring & SOC capability
📌 Incident response and 48-hour reporting readiness
📌 Third-party/vendor cybersecurity
📌 Business continuity & disaster recovery
📌 Cybersecurity audit readiness
📌 Security policies, standards and procedures
📌 Cybersecurity skills and staffing
📌 Data protection and digital sovereignty
⚠️ What Happens If You Don't Comply? (Article 22) Financial Penalties:
500K – 1M Birr → Late framework implementation
1.5M – 2M Birr → Failure to report incidents within 48 hours
1.2M – 2M Birr → Providing services without a license
3× maximum fine → For repeat offenses
Criminal Penalties: (Article 25)
7–10 years in prison → For intentional violations that cause harm
Follow,share,subscribe ያርጉን!!!
Ethio Cyber!!!
👉https://t.me/ethiocybert
👉https://lnkd.in/dhAgqaPW
👉https://lnkd.in/d5XbR5yv
👉https://lnkd.in/duAcaMhh
👉https://lnkd.in/d-5CBtzj
👉https://lnkd.in/dZNZxa9v
👉https://lnkd.in/d_6ttEKj

02/07/2026

🚨 የሳይበር ማስጠንቀቂያ:

"Trust", "Google TV" እና "Known" መተግበሪያዎች የባንክ ሂሳቦችን እንዴት እያጠቁ ነው?

የኢትዮጵያ ንግድ ባንክ (CBE) በቅርብ ጊዜ "Trust"፣ "Google TV" እና "Known" የተባሉ አደገኛ የአንድሮይድ መተግበሪያዎች በቴሌግራም እና WhatsApp ላይ እየተሰራጹ መሆኑን አስታወቀ። ነገር ግን እነዚህ መተግበሪያዎች እንዴት የባንክ አካውንትን ሲያስከትሉ የቴክኒካል ሂደቱ ምንድን ነው?

ይህ ዓይነቱ በቴክኖሎጂ የታገዘ ጥቃት (Android Banking Trojan) በሚከተለው ዘዴ ይሰራል፡

1️⃣ ማስተላለፍ እና ማስነሳት (Social Engineering): ሃከሮቹ በChrome፣ Telegram ወይም WhatsApp ላይ "ነፃ የኢንተርኔት ምግብ" ወይም "አዲስ ፊልም" በሚሉ ስም ግዢ ያለውን ሊንክ ይላካሉ።

2️⃣ ውጭ ከሆኑ ምንጮች መጫን (Sideloading): እንደ Google Play Store ያልሆኑ ምንጮችን (Third-party) በመጠቀም መተግበሪያውን ሲያወርዱ አንድሮይዱ የማህደር (Malware) ተፈቃድ እንዲሰጥ ያደርጋል።

3️⃣ የተደራሽነት አገልግሎትን መጠቀም (Accessibility Service Exploit): ይህ ዋናው የጥቃቱ ስርዓት ነው። መተግበሪያው ለሰው ያለውን የእይታ ችግር ለመፍታት እንደሚለመድ ይመስላል፣ ነገር ግን በእውነቱ ሁሉንም የስክሪን ንብረት እና የቁልፍ ጫንቃዎችን (Keystrokes) ለማንበብ ይጠቀማል።

4️⃣ የማይሰራ ገጽ/ሽፋን ጥቃት (Overlay Attack): ተጠቃሚው ንግድ ባንክ ወይም ቴሌብር ሲከፈት፣ ማህደሩ በፍጥነት የባንኩን እውነተኛ መግቢያ የሚመስል ስውር ሽፋን ያዘላል። ተጠቃሚው ፒን (PIN) እና የይለፍ ቃል ሲጻፍ ማህደሩ በመስቀል ይወስዳል።

5️⃣ ገንዘብ ማስወገድ: ያገኘውን መረጃ በመጠቀም ከተጠቃሚው ፈቃድ አልባ ገንዘብ ወደ ሌሎች አካውንቶች ይዛወራል።

🛡️ የመከላከል እርምጃዎች:

✔️ ከPlay Store ውጭ ማንኛውንም መተግበሪያ አይጫኑ።

✔️ ከቴሌግራም/WhatsApp የሚመጡ አስገራሚ ሊንኮችን አይክፈቱ።

✔️ በስልክዎ 'Settings > Accessibility' ውስጥ ያልታወቀ መተግበሪያ ቢኖር ወዲያውኑ ያጥፉት።

✔️ በሞባይል ባንክን ላይ የፊት አዝማሚያ (Biometric) ከፒን (PIN) ጋር በማጣመር ይጠቀሙ።

ለሌሎች ማህበራዊ ሚዲያዎች ያካፍሉ—ብዙ ሰዎች እስከአሁን ይህንን አደጋ አላወቁም!

Follow,share,subscribe ያርጉን!!!

Ethio Cyber!!!

👉https://t.me/ethiocybert

👉https://lnkd.in/dhAgqaPW

👉https://lnkd.in/d5XbR5yv

👉https://lnkd.in/duAcaMhh

👉https://lnkd.in/d-5CBtzj

👉https://lnkd.in/dZNZxa9v

👉https://lnkd.in/d_6ttEKj







#የሳይበርደህንነት

30/06/2026

🚨 🇺🇸 አሜሪካ ስለ ሩሲያ የመንግስት ድጋፍ ያላቸው ሃከሮች መረጃ ለሚያቀርብ 10 ሚሊዮን ዶላር ሽልማት አቀረበች

US Offers $10M Bounty for Russian State Hackers

የአሜሪካ መንግስት በሩሲያ መንግስት ድጋፍ እንደሚደረግላቸው በሚጠረጠሩ ሁለት የሳይበር ጥቃት ቡድኖች ላይ ትልቅ እርምጃ ወስዷል። መንግስቱ የUNC5792 እና UNC4221 በሚል የተሰየሙ የጠለፋ ቡድኖችን ለመለየት ወይም ያሉበትን ቦታ ለማወቅ የሚያስችል መረጃ ለሚያቀርብ ሰው እስከ 10 ሚሊዮን ዶላር የሚደርስ ሽልማት አስታውቋል።

ይህ ሽልማት በአሜሪካ የውጭ ጉዳይ መሥሪያ ቤት በሚተዳደረው "Rewards for Justice" ፕሮግራም ስር የተገለጸ ሲሆን፣ በአሜሪካ ብሔራዊ ደህንነት ላይ የሚደረጉ የሳይበር ስለላ እና ጥቃቶች ምን ያህል ከባድ እንደሆኑ ያሳያል።

በሪፖርቶች መሠረት ሁለቱ ቡድኖች የአሜሪካ መንግስት ባለስልጣናትን፣ የጦር ኃይል አመራሮችን እና የአጋር ሀገራት ሰራተኞችን በመነጣጠር የስለላ ዘመቻዎችን ሲያካሂዱ ቆይተዋል። ይህም ስሜታዊ የመንግስት እና የመከላከያ መረጃዎችን ለማግኘት የተቀናጀ ጥረት መኖሩን ያመለክታል።

እነዚህ ጠላፊዎች በቅርብ ጊዜ በመልዕክት መላላኪያ መተግበሪያዎች ላይ ጥቃት ለመፈጸም የሚያስችሉ አዳዲስ ችሎታዎችን እያሳዩ መሆኑ ተገልጿል። እነዚህ መተግበሪያዎች ለመንግስታዊ እና ለወታደራዊ ግንኙነቶች ዋና መገናኛ መሣሪያዎች በመሆናቸው በጠላፊዎች ዒላማ ሆነዋል።

ምንም እንኳን የጥቃቱ ዝርዝር ቴክኒካዊ መንገዶች አልተገለጹም፣ እንደዚህ ዓይነት ጥቃቶች በተለምዶ የይለፍ ቃል ስርቆት፣ የተጠቃሚ ክፍለ ጊዜ (Session) መጥለፍ ወይም የማረጋገጫ ሂደቶች ድክመቶችን መጠቀምን ያካትታሉ።

ባለሙያዎች እንደሚገልጹት የእነዚህ ዘመቻዎች ተፅዕኖ ከመረጃ ስርቆት በላይ ሲሆን የስራ ደህንነት መጣስ፣ ሚስጥራዊ መረጃ መጋለጥ እና የግለሰቦች ደህንነት ላይ አደጋ ሊያስከትል ይችላል።

በዚህ ምክንያት ድርጅቶች የመልዕክት መላላኪያ ስርዓቶቻቸውን የማረጋገጫ ሂደቶች እንደገና እንዲገመግሙ፣ ባለብዙ-ደረጃ ማረጋገጫ (MFA) እንዲያነቃቁ እና ያልተለመዱ የመግቢያ እንቅስቃሴዎችን በቅርብ እንዲከታተሉ ተመክሯል።

የ10 ሚሊዮን ዶላር ሽልማቱ አሜሪካ እነዚህን የሳይበር ስለላ ተግባራት ለማቋረጥ ምን ያህል ቅድሚያ እንደሰጠች ያሳያል። ባለሥልጣናትም ይህ ሽልማት ከቡድኖቹ ጋር የተያያዙ ሰዎች ጠቃሚ መረጃ እንዲያቀርቡ ሊያበረታታ እንደሚችል ያምናሉ።

Follow,share,subscribe ያርጉን!!!

Ethio Cyber!!!

👉https://t.me/ethiocybert

👉https://lnkd.in/dhAgqaPW

👉https://lnkd.in/d5XbR5yv

👉https://lnkd.in/duAcaMhh

👉https://lnkd.in/d-5CBtzj

👉https://lnkd.in/dZNZxa9v

👉https://lnkd.in/d_6ttEKj

















#የሳይበርደህንነት

02/06/2026

💡 Cyber Security Tip of the Day

⚡ከአደገኛ የመረጃ ደላሎች (Data Brokers) ጀርባ ያለው እውነታ

የሰባት ሚሊዮን አረጋውያንን የግል መረጃ ለዓለም አቀፍ አጭበርባሪዎች በመሸጥ ጥፋተኛ የተባለው የሰሜን ካሮላይናው ነዋሪ በቅርቡ በ10 ዓመት እስራት መቀጣቱ አንድ ትልቅ እውነታን ያሳየናል፦ መረጃ (Data) ለማህበራዊ ምህንድስና (Social Engineering) ጥቃቶች ዋነኛው መሳሪያ ነው።
የሳይበር ወንጀለኞች አብዛኛውን ጊዜ የሚያጠቁትን ሰው ዝርዝር ራሳቸው አይፈጥሩም። ይልቁንም በተለይ በቀላሉ ሊታለሉ የሚችሉ የህብረተሰብ ክፍሎችን (እንደ አረጋውያንን) ለይተው መረጃዎችን አሽገው በሚሸጡ የ"Dark Web" ገበያዎች እና ህገ-ወጥ የመረጃ ደላሎች ላይ ይተማመናሉ።
🛡️ እንደ ሳይበር ባለሙያ ምን እንረዳለን?
1️⃣የታለመ ጥቃት (Targeted Demographics)፦ አጥቂዎች የማጭበርበሪያ ስልታቸውን ይበልጥ እውነተኛ ለማስመስል የታለሙ መረጃዎችን (ስም፣ ዕድሜ፣ ስልክ ቁጥር፣ አድራሻ) ይገዛሉ።
2️⃣ የመረጃ አስተዳደር (Data Governance) አስፈላጊነት፦ የመረጃ ግላዊነትን መጠበቅ የድርጅቶች ህጋዊ ግዴታ ብቻ ሳይሆን የሰዎች ደህንነት ጉዳይም ጭምር ነው። ቁጥጥር የማይደረግበት ወይም የተሰረቀ መረጃ ለዓለም አቀፍ ማጭበርበር ስርአት እንደ ነዳጅ ያገለግላል።
3️⃣ቅድመ-መከላከል፦ እንደ ሳይበር ደህንነት ባለሙያ፣ ማህበረሰባችንን እና ቤተሰቦቻችንን ስለ መረጃ አያያዝ እና ግላዊነት ማስተማር ይኖርብናል። ዲጂታል አሻራችንን መቀነስ አጥቂዎች እኛን በቀላሉ እንዳያገኙ ያደርጋል።

Follow,share,subscribe ያርጉን!!!
Ethio Cyber!!!

👉https://t.me/ethiocybert
👉https://lnkd.in/dhAgqaPW
👉https://lnkd.in/d5XbR5yv
👉https://lnkd.in/duAcaMhh
👉https://lnkd.in/d-5CBtzj
👉https://lnkd.in/dZNZxa9v
👉https://lnkd.in/d_6ttEKj

30/04/2026

❗❗❗
Hi everyone,
Today I have received a suspicious message from a recruiter named Phoebe R, which appears to be a scam. After searching online, I found multiple warnings about Phoebe R, and didn't even find her account or anything about the company she's promoting confirming that this is indeed a scam.
⚠️ Do NOT engage with this individual
⚠️ Do NOT click on any link she send
⚠️ Do NOT register on any platforms they promote
⚠️ Do NOT share any info about yourself
Think twice before clicking on any links or proceeding further

follow,share,subscribe ያርጉን!!!
👉https://t.me/ethiocybert
👉https://www.linkedin.com/company/108010626/admin/dashboard/
👉https://www.youtube.com/
👉https://www.instagram.com/ethio_cybertech/
👉https://tiktok.com/
👉https://linktr.ee/Ethiocyber
👉https://t.me/ethiocybercall

16/04/2026

16/04/2026

🚨ለአርቲስ ዶ/ር ቴውድሮስ ካሳሁን አድናቂዎች ፈተና (Challenge)

🚨🚨 አስቸኳይ ጥሪ – 4 ሰዓት ብቻ ቀርቷል! 🚨🚨

🚨 ሀሰተኛ AI ሙዚቃን መስማት እናቁም 🚨

በዩቲዩብ ላይ AI በመጠቀም የቴዲ አፍሮን ድምጽ በማምረት የውሸት ሙዚቃ ተለቅቋል!

❌ ይህ እውነተኛ ሙዚቃ አይደለም!
❌ ከቴዲ አፍሮ ጋር ምንም ግንኙነት የለውም!
✅ እውነተኛው ሙዚቃ ዛሬ ምሽት 8፡00 ላይ ከቴዲ አፍሮ ኦፊሻል ቻናል ብቻ!

🎯 MISSION (START NOW):
1️⃣ ወደ YouTube ግባ
2️⃣ ሀሰተኛ ቪዲዮዎችን ፈልግ
3️⃣ Report አድርግ (Spam / Impersonation)
4️⃣ ኮሜንት አድርግ:

👉 “this is AI not official Teddy Afro music”

⏰ እውነተኛው ሙዚቃ ዛሬ ሚያዚያ 8 ቀን 8:00 ሰዐትይወጣል!!!

💪 እንተባበር – አርቲሳችንን እንደግፍ!!

❤️ እውነተኛውን እንደግፍ!!!

official Teddy Afro page

https://web.facebook.com/TeddyAfroMusic
https://www.youtube.com/

follow,share,subscribe ያርጉን!!!

👉https://t.me/ethiocybert
👉https://www.linkedin.com/company/108010626/admin/dashboard/
👉https://www.youtube.com/
👉https://www.instagram.com/ethio_cybertech/
👉https://tiktok.com/
👉https://linktr.ee/Ethiocyber
👉https://t.me/ethiocybercall

# Teddy Afro
Afro

11/04/2026

🚨 $3.6 Million Stolen in Bitcoin Depot Hack
የቢትኮይን ዴፖ 3.6 ሚሊዮን ዶላር ተሰረቀ

🔍 The Incident

በዩናይትድ ስቴትስ ትልቁ የቢትኮይን ኤቲኤም ኦፕሬተር የሆነው Bitcoin Depot ተበጠሰ!
አጥቂዎች የኩባንያውን የዲጂታል ንብረት ሒሳቦች መግቢያ መረጃ በመስረቅ ከ3.6 ሚሊዮን ዶላር በላይ የሚጠጋ ቢትኮይን ሰረቁ።
Bitcoin Depot, the leading operator of Bitcoin ATMs in the United States, recently disclosed a security breach that resulted in the theft of approximately 3.6 million dollars worth of cryptocurrency. The company reported that hackers gained access to its IT systems and obtained credentials to settlement accounts, though they maintain that customer platforms and data remain unaffected by the intrusion.

The largest Bitcoin ATM operator in the United States, Bitcoin Depot, recently announced that it fell victim to a significant cyberattack resulting in the loss of millions of dollars in digital assets. According to an official filing with the Securities and Exchange Commission, the company identified an unauthorized intrusion into its internal IT systems on March 23. This security breach allowed attackers to acquire sensitive credentials for digital asset settlement accounts, which were then used to facilitate the transfer of approximately 50.903 bitcoin out of the company’s wallets.

Despite the scale of the financial loss, Bitcoin Depot has emphasized that the incident appears to have been limited to its corporate IT environment. The company stated that there is currently no evidence to suggest that customer platforms, systems, or personal data were compromised during this specific event. While the financial impact is notable, the firm believes the attack has not had a material effect on its day-to-day operations, though it is bracing for potential costs related to legal fees, regulatory inquiries, and incident response efforts.

In its financial assessment of the situation, the company has recorded a preliminary loss estimate of roughly 3.665 million dollars, based on the market value of the stolen bitcoin at the time of the transfer. Bitcoin Depot noted that it does maintain insurance coverage for cybersecurity incidents, but it warned investors that there is no guarantee the policy will fully cover the losses sustained. The investigation into the full scope of the breach is still ongoing, and final figures may change as more details emerge.

This is not the first time the company has faced significant security challenges, as it previously notified over 26,000 individuals about a separate data breach that occurred in 2024. In that prior instance, hackers managed to access files containing highly sensitive personal information, including driver's license numbers and home addresses. The disclosure of that particular breach was delayed by a full year, a move the company attributed to a request from law enforcement during an active investigation.

The news of this latest theft comes during a period of heightened activity for crypto-related cybercrime, following closely after a massive 285 million dollar exploit of the Drift decentralized finance platform. These recurring incidents highlight the persistent vulnerabilities within the digital asset industry, even for established public companies. As Bitcoin Depot continues its forensic review, the industry remains on high alert regarding the sophisticated methods used by threat actors to target institutional wallets.
Source: https://www.securityweek.com/3-6-million-stolen-in-bitcoin-depot-hack/

follow,share,subscribe ያርጉን!!!
👉https://t.me/ethiocybert
👉https://www.linkedin.com/company/108010626/admin/dashboard/
👉https://www.youtube.com/
👉https://www.instagram.com/ethio_cybertech/
👉https://tiktok.com/
👉https://linktr.ee/Ethiocyber
👉https://t.me/ethiocybercall

A hacker transferred more than 50 bitcoin from the Bitcoin ATM operator’s wallets after stealing credentials.