How fraudsters hacked Flutterwave to steal N11 billion in four days

Nigerian payment giant Flutterwave has suffered another security breach, allowing unknown persons to divert N11 billion to various bank accounts.

The incident happened one month after the company obtained a court order to recover another $24 million lost to unauthorised PoS transactions.

Reports say the hackers illegally transferred the N11 billion (about $7 million) to several accounts in April 2024.

The company disclosed that it detected unauthorised activities that were inconsistent with its customer behaviours.

The company did not disclose the amount lost to the unauthorised access but said no customer funds were lost or compromised.

Flutterwave said:

TechCabal quoted an insider source saying the funds were transferred to multiple accounts across five financial institutions over four days.

The hackers allegedly evaded detection by keeping the deposits below thresholds, which would prompt fraud checks.

In October 2023, about 6,000 bank account holders across 35 banks and financial institutions received N19 billion illegally through unauthorised PoS transactions by merchants. 

This happened as Wema Bank issued a warning regarding a new banking cyber threats targeting android devices.

The bank said the malware is called “Brokewell” and has cautioned customers to remain alert and never download.

Wema Bank explained that the malware is designed to steal sensitive information such as banking details and personal data, is being spread through various means, including phishing emails and malicious websites.

It added that once installed on a victim’s device, the malware can allow fraudsters to remotely access and control the device, giving them unrestricted access to the victim’s personal and financial information.

TimesNow.com.ng earlier reported that with effect from March 31, 2024, Disha, a platform for creators that Flutterwave acquired in 2021, would be temporarily shut down.

The platform allows digital creators to curate, sell digital content, create portfolios and receive payments from their audience globally.

The company explained that the decision was necessary to reevaluate its objectives and realign its vision to better serve the creative community.

Source: TimesNow.com.ng

Spread this news

Leave a Reply

Your email address will not be published. Required fields are marked *