Nigerian Hackers Break into Bank System, Steal N6Bn

A group of criminals aided by an insider gained access to a bank’s computers, stealing a jaw-dropping sum. How did they do it?

According to Weekly Trust, Godswill Oyegwa Uyoyou worked in the Information and Communication Technology (ICT) department of a new generation bank but is currently on the run, as the fair-skinned 38-year-old is wanted by the Economic and Financial Crimes Commission (EFCC), in a case of fraud involving N6.28billion.

 He allegedly conspired with others and hacked into the bank’s computers, disbursing the funds to various accounts as they pleased.

Oyoyou, who hails from Isoko South Local Government Area of Delta State, is said to have carried out the massive heist over a short period of time.

Mr. Wilson Uwujaren, EFCC spokesman, told Weekly Trust that the operation was carried out not only by Oyoyou, but an entire syndicate. 

“They most likely got through to [Uyoyou] because he’s an IT person in the bank, he said, adding that on one Saturday, he took the ‘cyber gang’ to the bank under the pretext that he was going to carry out some maintenance work, allowing them access to hardware, and they commenced to penetrate the bank’s database.

Ujwujaren said they then increased the balances of some accounts. Sources told us that no culprits have been arrested yet and the spokesman said “The matter is still under investigation.”

He added that he couldn’t talk about the specific location where the crime was carried out, because it will jeopardise the investigation.

But banking industry sources said  that it is an Abuja branch of a new generation bank. 

Uwujaren said the thieves have not withdrawn the entire sum stated. “It was in the process of withdrawing some of the money that they were caught,” he said, adding that some of the criminals are being tracked.

This is not the first time the EFCC – with a mechanism to check similar crimes – has been faced with such an issue. “There was a report from the bank,” Uwujaren said.

“It can happen to any establishment. It’s not a matter of new or old generation bank,” he added.

Weekly Trust probed further, to the last known address of suspect Uyoyou as advertised by the EFCC on newspapers announcing him wanted. At Balogun Akarutu Street, off Tijani Salako, Ile Epo, Ashamu Estate, Ejigbo, Lagos, where Uyoyou claimed to be living, there were two houses labelled as 7a and 7b.

The probe at No. 7a revealed that there was nobody by such a name living in any of the flats on the premises. Similarly, a shop-owner at No. 7b who also resides in the main house alleged that there was nobody known by such a name in any of the flats.

Another resident, a lady in 7a, also alleged that they did not have a banker for a neighbour.

Upon visiting the premises labelled 7a, Weekly Trust discovered that the house in question has about four rooms and parlour, best-described as studio flats and all seemed to be occupied.

It also housed a small uncompleted structure in front of these flats, fenced around with a big red gate. 

The heist by Uyoyou and Co. is just the latest in a string of major cyber-theft jobs. Figures released by the Central Bank of Nigeria (CBN) show that the nation’s banking sector has lost over N20 billion through internet fraud in 2013 alone. In September of the same year, undergraduates of a Nigerian federal university infamously defrauded Union Bank Plc to the tune of N2 billion.

On the legislative side of things, in 2011 Hon. Bassey Etim sponsored a Cyber Security Bill to safeguard banks and their clients’ funds.

A 15-member cybercrime committee with representation from both government and private sector, was set up with the task of designing solutions for Nigerian internet-based fraud and cybercrime. Upon their deliberations, a ‘Draft Cybercrime Act to the President’, with the committee forming the Nigerian Cybercrime Working Group (NCWG), in order to accelerate the implementation of its Cybercrime research efforts, and to assist the Nigerian National Assembly in the quick passage of a Cybercrime Bill. So far, this is yet to become law.

A 2011 annual report of the CBN revealed: “There were 2,527 reported cases of attempted fraud or forgery, involving N29.5 billion, as against 5,960 cases involving N19.7 billion and N3.1billion (US$19.2 million) in 2010.” The report said they were tech-driven crimes, or attempts.