By 
The digital underworld of Zambia’s banking system spilled into the courtroom as three Zambians and three Ugandans were found guilty of orchestrating a K14.3 million cyber-heist targeting Atlas Mara Bank six years ago.
The elaborate scheme—driven by insider cooperation and sophisticated hacking tools—finally caught up with the six accused, who were convicted on Monday.
The convicts are Patrick Kafula, Makhosana Ndolo, Austin Daka, and Ugandan nationals Vincent Ssempijja, Rashid Kyagulanyi, and Sylvester Apuli.
Prosecutors presented evidence linking them to three hacking incidents that resulted in losses of K6.2 million and K8.1 million, with a third attempted breach failing.
According to court findings, the group “jointly and whilst acting together” conspired to defraud Atlas Mara Bank by installing software designed to bypass security measures protecting critical data.
They were also charged with unauthorized access to a critical database, contrary to Sections 99(1) and 99(8) of the Electronic Communications and Transactions Act No. 21 of 2009, read with Regulation 32 of Statutory Instrument No. 71 of 2011.
Court records revealed a meticulously coordinated plan that merged insider assistance with digital intrusion tools.
The syndicate reportedly used USB key loggers, malware-infected flash drives, and laptops to harvest employee login credentials and gain unauthorized access to the bank’s systems.
Forensic experts confirmed the devices could bypass physical safeguards and manipulate banking operations remotely.
Magistrate Ngobola noted that the accused diverted the stolen funds into multiple beneficiary accounts under their control, demonstrating a clear intent to permanently deprive the bank of its assets.
Testimony from bank officials and cybersecurity specialists confirmed the unauthorized transactions and the syndicate’s knowledge and command over the illicit transfers.
The court addressed 115 counts, including unlawful possession of hacking devices, conspiracy to defraud, unauthorized access, theft, and money laundering. Charges were anchored in both the Electronic Communications and Transactions Act and the Prohibition and Prevention of Money Laundering Act.
Attempts by some of the accused to shift blame to external actors were dismissed by the magistrate as unsupported by evidence.
Magistrate Ngobola concluded: “The prosecution has proved beyond reasonable doubt that all accused acted in concert, employing digital tools and insider knowledge to commit the offenses.
“Their actions were deliberate, coordinated, and intended to avoid detection.”
Sentencing for the six convicted individuals will be scheduled before the High Court in due course.
WARNING! All rights reserved. This material, and other digital content on this website, may not be reproduced, published, broadcast, rewritten or redistributed in whole or in part without prior express permission from ZAMBIA MONITOR.
Comments