Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
ET

Ransomware attacks in Ethiopia

5 organisations in Ethiopia have been listed on ransomware leak sites, ranking #110 worldwide. Updated .

Victims
5
0% of global total
Global rank
#110
of 185 countries
Active groups
4
Most: N0n
Sectors
3
Most: Other

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in Ethiopia. Figures are computed from the tracked records, not inferred.

A ransomware attack against Ethiopia recorded five victims places it in 110th globally; notably, groups Lynx and Qilin have been most active there, while sectors like manufacturing and financial services report hits.

Ethiopia in the global picture

Ethiopia accounts for 5 of the ransomware disclosures tracked here, ranking #110 worldwide and making up 0% of the global total. The sectors listed most often are Other, Financial Services, Manufacturing.

Who is most active in Ethiopia

N0n — 2 victims in Ethiopia. Lynx — 1 victims in Ethiopia. Qilin — 1 victims in Ethiopia. Qilin ransomware was first observed in July of 2022.

Ransomware threat profile: Ethiopia

Ethiopia ranks #110 worldwide for ransomware disclosures, with 5 victims in this database — 0% of the global total. The groups listing the most organisations here are N0n, Lynx and Qilin.

The most frequently listed industries in Ethiopia are Other, Financial Services, Manufacturing. Manufacturing is an attractive target because production downtime turns directly into lost revenue.

The volume reflects Ethiopia's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in Ethiopia 5

Organization Disclosed
Horn of Africa Regional Environment Centre and Network
N0n
Company #98
N0n
Africa Insurance
Lynx
Addis
Qilin
habeshacement.com
Lockbit3

Frequently asked questions

How many ransomware attacks have occurred in Ethiopia?

Ethiopia has recorded 5 ransomware victim disclosures in this database, ranking #110 globally. This represents 0% of all tracked ransomware attacks worldwide.

Which ransomware groups target Ethiopia?

The ransomware groups most active in Ethiopia are N0n, Lynx, Qilin, Lockbit3. These groups collectively account for the majority of victim disclosures attributed to Ethiopia.

Which industries are most targeted by ransomware in Ethiopia?

In Ethiopia, the most frequently targeted sectors are Other, Financial Services, Manufacturing. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does Ethiopia rank globally for ransomware attacks?

Ethiopia ranks #110 globally for ransomware attacks with 5 victim disclosures, representing 0% of the worldwide total of 24,049 tracked victims.

How can organisations in Ethiopia protect against ransomware?

Organisations in Ethiopia should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Ethiopia is also recommended.