Cyber Threat Actor: Khadim Khouma

Khadim Khouma is identified as an alias associated with cybercriminal activity targeting the financial sector in Senegal. This alias is specifically linked to a significant incident involving the International Bank for Commerce and Industry of Senegal (BICIS) on April 7, 2025. During a system migration event at BICIS, perpetrators exploited the situation to infiltrate the bank's systems. Their primary objective was financial theft, successfully draining approximately 211 million CFA francs from client accounts. The operation relied heavily on insider access provided by individuals within the bank, namely Modou Diom and Sunday Akamibé, who facilitated fraudulent transfers to accomplices. Following the theft, the stolen funds were converted into USDT cryptocurrency, indicating a deliberate effort to obscure the money trail and engage in money laundering.

The BICIS incident represents the sole publicly reported operation definitively associated with the alias Khadim Khouma. The investigation into this breach uncovered not only the cyber theft but also violations of exchange regulations and, significantly, led to the discovery of cocaine pellets during a related search. This resulted in multiple arrests and charges against those involved, extending beyond cybercrime to include criminal association, theft, concealment, and drug trafficking. While the alias Khadim Khouma is connected to this event, the publicly available details focus on the actions of Modou Diom and Sunday Akamibé as key facilitators exploiting their insider position. There is no explicit information within the provided source detailing Khouma's specific role beyond the alias association, broader targeting patterns beyond this single bank, specific technical tools or malware used, or any established affiliations with larger criminal groups or state actors. The operation demonstrates a clear financial motivation executed through insider compromise and cryptocurrency conversion.