PHISHING FI NAGEENYA SAAYIBARII

PHISHING MAALIDHA?

Phishing jechuun yakka mala saayibarii fayyadamun raawwatamu keessaa isa tokko. Innis nama gowwoomsuun odeeffannoo iccitii akka:
• Username
• Password
• OTP
• Lakkoofsa bankii
• Data dhuunfaa
• Odeeffannoo hojii

namarraa fuudhuu dha.

Yeroo baay’ee phishing:
• Email
• SMS (Smishing)
• media hawaasaa (social media)
• Bilbila
• Website sobaa

fayyadamuun raawwatama.

AKKAMITTI PHISHING HOJJETA?

1. Hacker ergaa sobaa garuu amansiisaa kan fakkaatu erga.
2. Linkii ykn attachment akka banan nama gaafata.
3. Namni linkii ykm attachment sana bana
4. Website sobaa garuu amanamaa kan fakkaatu irratti login akka godhan nama gaafata.
5. Odeeffannoon namni webiste sana irratti galche hundi hacker bira gaha.

FAKKEENYA PHISHING

1. EMAIL PHISHING
   “account kee yeroo muraasa booda ni cufama. Hatattamaan login godhii sirreessi.”
2. SMS PHISHING (SMISHING)
   “Bankiin kee account kee cufuuf deema. Linkii kana bani sirreessi”
3. SOCIAL MEDIA PHISHING
   Facebook, Telegram, WhatsApp irratti:
   • “Ati mo’atteetta”
   • “Kennaa/Gift argatteetta”
   • “Free data”
   • “Scholarship”
   • “Visa”
   • “Free Hajj”
   • “Free Umrah”

jedhanii linkii ergu.

Namoonni hedduun:
“Ati Hajjii bilisaan deemta”
“Umrah free”
“Carraa mootummaa”
jedhanii namoota gowwoomsu.

Yeroo hedduu:
• Odeeffannoo dhuunfaa gaafatu
• Maallaqa registration jedhu gaafatu
• Password ykn OTP gaafatu
• Malware kaa’u

MALLATTOOLEE PHISHING (SIGNS)

• Ariifachiisummaa uumuu
• “Amma gochuu qabda”
• “Account kee ni cufama”
• Gift guddaa hin amanamne
• Maallaqa salphaatti argamsiisu jedhu
• URL shakkisiisaa
• Dogoggora grammar
• Nama hin beekne irraa dhufu
• OTP ykn password gaafatu

Yoo waan tokko:
“Baay’ee gaarii”
ykn
“Dhugaa ta’uu hin fakkaanne”
ta’e, yeroo hedduu scam ta’a.

STAR PRINCIPLE

S – STOP (Dhaabadhu)
Battalumatti linkii hin cuqaasin.
Hin ariifatin.

T – THINK (Yaadi)
Ergaan kun mootummaa ykn dhaabbata sirrii irraa dhufee?
Kennaa/Gift kana maaliif bilisaan kennu?

A – ASK (Gaafadhu)
Namoota biroo kan muxannoo IT qaban gaafadhu. Kanaan dura namoonni waan akkanaa irraa fayyadaman jiruu gaafadhu adda baasi.
Yoo gama dhaabbataa ykn waajjira sitti fakkates IT team ykn security department qunnami.
Website official ilaali.

R – REACT (Tarkaanfii fudhadhu)
Yoo phishing ta’e:
• Linkicha haqi
• Qaama dhimmi ilaalutti gabaasi ykn akeekkachiisa namoota biroof kenni.
• Block godhi
• IT teamitti gabaasi

HTTPS FI LOCK MAAL JECHU?

Namoonni hedduun:
“Website lock qaba jechuun nageenya qaba”
jedhu.

Kun sirrii guutuu miti.

HTTPS jechuun:
Data yeroo internetiin darbu eega.

Garuu:
Website sana kan qabu hacker yoo ta’e,
HTTPS qofaan nageenya hin ta’u.

FAKKEENYA

https://free-hajj-offer.com

Website kun:
• Lock qabaachuu danda’a
• HTTPS qabaachuu danda’a

Garuu:
Website scam ta’uu danda’a.

Kana jechuun:
HTTPS data kee karaa irratti eega,
garuu odeeffannoo kee hackeritti kennuu irraa si hin eegu.

Kanaaf:
LOCK ykn HTTPS qofatti amanamuu hin qabdu.

MITIGATION (ITTISA)

1. LINKII SHAKKISIISAA HIN BANIN
2. MFA/2FA HOJII IRRA OOLCHI
3. PASSWORD CIMAADHA FAYYADAMI
4. SOFTWARE UPDATE GODHI
5. ANTIVIRUS FAYYADAMI
6. URL SIRRIITTI ILAALI
7. GIFT HIN AMANAMNE OF EGGANNAA GODHI
   “Free Hajj”
   “Free Umrah”
   “Lottery”
   “Prize”
   “Free money”
   jedhan irratti of eeggannoo godhi.
8. LEENJII NAGEENYAA BARADHU

YOO PHISHING SI MUDATE

• Password kee jijjiiri
• MFA hojii irra oolchi
• Bankii qunnami
• IT teamitti gabaasi
• Device scan godhi
• Account activity kee ilaali

XUMURA

Phishing jechuun mala gowwoomsaa internet irratti bal’inaan fayyadamaa jiru dha. Hackeronni email, SMS, social media, fi website fake fayyadamuun namoota gowwoomsu. Gift guddaa hin amanamne akka “Free Hajj”, “Free Umrah”, “Lottery”, ykn “Prize” fayyadamuun namoota hedduu saamu. HTTPS ykn lock qofa irratti amanamuu hin qabnu, sababni isaa website scam illee HTTPS qabaachuu danda’a. Kanaaf yeroo hunda STAR principle jechuun STOP, THINK, ASK, fi REACT fayyadamuun of eeggannoo gochuun barbaachisaa dha.