GSIE Technology thwarts 168 million FCFA cyberattack in Senegal

GSIE Technology, a provider of the Avia digital financial services platform used by the microfinance institution ACEP, has reported a major attempted cyberattack. The company filed a complaint with the Special Cybersecurity Division (DSC) following an intrusion detected on September 12 and 13, 2026.

Cybercriminals exploited an application vulnerability to deploy malicious web shells and exfiltrate client credentials and passwords. This led to unauthorized access to 1,219 accounts. On September 23, attackers created 39 fictitious electronic wallets to facilitate 842 fraudulent transfers totaling 168,200,500 FCFA.

Due to rapid detection by GSIE, the majority of the funds remained within the system. However, 79 instant transfers totaling 11,043,000 FCFA were successfully executed to Orange Money accounts. Authorities have identified the beneficiaries of the transferred funds, and investigations are ongoing regarding charges of criminal conspiracy, fraudulent access to computer systems, fraud, and theft of personal data.