Cyber Incident Victim: PressAfrik
Date:
Mar 2025
Location:
Senegal
Summary
The YouTube channel and linkedGmail account of PressAfrik were hijacked after attackers circumvented two‑factor authentication by creating fraudulent security and recovery codes. The breach deprived the group of editorial and administrative control, coincided with a surge in subscribers and AdSense earnings, and led to a filing with the cybercrime division seeking identification of the perpetrators and restoration of the channel.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Wednesday, March 26, 2025, at 12:40, the YouTube channel PressAfriktvHD, operated by PressAfrik Group, was compromised when attackers bypassed its security protocols by fraudulently generating a security key and a recovery backup code for two‑step validation. Using these credentials, the intruders gained full control of the channel and the associated Gmail account, depriving the editorial and technical teams of any administrative or publishing access. The group’s general management issued a statement on Thursday, March 27, confirming the incident and describing the method used by the perpetrators.
The statement noted that the attack occurred during a period of notable growth for the channel, with subscriber numbers rising from approximately 386,000 to nearly 395,000 in a few weeks and AdSense revenue showing strong increase over the preceding 28 days. It also highlighted that the breach constituted a serious affront to the outlet’s journalistic work and its public‑service mission to provide impartial, accurate information. The communiqué pointed out that the incident followed similar cyberattacks on the news sites Seneweb and Dakaractu, which had been temporarily inaccessible a few days before being restored through safeguard measures. The attackers’ actions took place precisely at the moment the channel was experiencing upward traction, according to the statement.
In response, PressAfrik Group said it had immediately filed a complaint with the Division Spéciale de la Cybercriminalité (DSC) to have the perpetrators identified and prosecuted. The organization urged its community, subscribers, and partners to remain vigilant and to report any suspicious or fraudulent content published under its name without delay. Finally, PressAfrik reiterated its commitment to free, reliable, and independent journalism and pledged to do everything possible to protect its editorial integrity and the trust of its audience.