Top Tweets for #CaBS

MSU student in court over US$1,1m cyber theft A 24-year-old Midlands State University final-year Computer Science student, Sabelo Malunga, has appeared in court accused of stealing more than US$1.1 million from CABS using malware. The State alleges that Malunga gained access to CABS’ computer systems while working as an IT intern between November last year and February 23 this year. Prosecutors allege that on January 23, while using a CABS-issued laptop, Malunga downloaded SUPREMO, a remote-access application, without authorisation. He allegedly hid the application within system files to avoid detection. He continued accessing CABS systems even after his internship ended. The malware allegedly allowed him to bypass the bank’s internal controls and create fraudulent ZIPIT and VISA transactions. The cyberattack was discovered after VISA flagged two suspicious international ATM transactions on March 27. CABS blocked the affected accounts but had already lost US$210,500. During a further investigation on April 13, CABS’ IT team found multiple malware infections on its servers. Investigators discovered 1,911 fraudulent ZIPIT transactions worth US$925,679, with funds allegedly sent to EcoCash, InnBucks, CBZ and Ecobank. CABS later engaged a South African digital forensics company, MWR, to investigate and remove the malware. The forensic investigation allegedly linked Malunga to the cyberattack. The State further alleges that the malware was used to create fraudulent transactions, bypass authorisation systems, make fictitious transfers and generate fake telegraphic transfers. CABS is alleged to have suffered an actual loss of US$1,136,179, with nothing recovered so far. Malunga is facing a hacking charge and was remanded in custody pending his bail application. The allegations are yet to be tested in court. ~Herald Zimbabwe