More than 50 mobile money agents and records officials from various companies have been arrested in connection to the recent hacking of Pegasus technologies Ltd, a third-party aggregator in financial transactions run by MTN, Airtel, Stanbic Bank and Bank of Africa.
The hackers accessed Pegasus technologies systems on October 3, and authorised mobile money transactions worth Shs 10 billion to more than 2,000 MTN and Airtel sim cards. In the aftermath, Pegasus technologies filed a case at Jinja Road police station but also alerted the cyber unit at CID headquarters in Kibuli.
A senior police officer and one of the lead investigators told Uganda Radio Network that they have so far picked more than 50 mobile money agents and records officials from companies on whose sim cards money was transferred and later withdrawn.
“These telecom-agents participated in registering numerous systems in the names of companies which had not authorised for such a process. Some of the agents helped the suspected hackers to withdraw the money before unauthorized access to Pegasus systems was detected,” the source said.
CID Spokesperson Charles Twine declined to divulge details of the development. He, however, said investigations were progressing very well. According to the cyber detective, hackers targeted the Online Virtual Accounts of the aggregator, after taking time to study the system.
“Our investigations have proved that the transaction order came from Pegasus to Banks even though it was not initiated by the administrators. These hackers accessed the Online Virtual Accounts for the aggregator and ordered Banks to pay mobile sim cards,” the senior cyber policeman said.
Detectives have since established that Sim Cards registered in unaware companies are now 1800 as opposed to 1500 earlier reported. Besides, several Sim Cards were registered in individuals mostly foreigners with names of two or three letters.
“We have people in charge of records from 40 companies in whose names these Sim Cards were registered. We have noticed that the records officers ordered for massive registration of these Sim Cards yet there was no need and their bosses were not informed,” a detective said.
CID has obtained closed circuit television (CCTV) footage showing some of the suspects from companies and agents registering sim cards in big numbers. CCTV footage also shows money being withdrawn at telecom agents that participated in fraudulent registration of sim cards.