Modou Diom

Profile narrative

Modou Diom, identified by that alias, is a Senegal‑based individual.
He was arrested in April 2025 after authorities linked him to a cyber intrusion at the International Bank for Commerce and Industry of Senegal (BICIS).
At the time of his arrest, Diom worked as a collection agent for Bamba Global Industrie Suarl.
His employer, Khadim Khouma, and a Nigerian national named Sunday Akamibé were also detained in the same operation.

The intrusion targeted BICIS, a financial institution operating in Senegal.
Attackers obtained unauthorized access and transferred an estimated 211 million CFA francs from customer accounts.
The compromised accounts belonged to commercial clients such as pharmacies and notary offices.
The primary motive behind the theft was financial gain, as the stolen funds were later converted to the cryptocurrency USDT.

Initial access was achieved by exploiting the period when BICIS was migrating from its legacy Connexis platform to the new My Sunu Corporation application.
No specific malware families or custom tools were mentioned in the public reports concerning this intrusion.
Once inside, the actors collected account numbers and used them to initiate fraudulent transfers.
The illicit proceeds were converted to USDT, a stablecoin, to facilitate further movement and concealment of the money.

Open sources do not indicate any state sponsorship or affiliation with a larger criminal syndicate for Modou Diom or his associates.
The collaboration appeared to be ad hoc, involving Diom, his employer Khadim Khouma, and the Nigerian national Sunday Akamibé.
Akamibé was reported to have directed the conversion of the stolen currency to USDT and was found in possession of cash and cocaine pellets during a search of his office.
The BICIS incident remains the only publicly documented operation attributed to this actor, serving as a representative example of their activity.

Incidents

Attributed incidents are available to members.