Sabelo Malunga accused of US$1.1 million CABS bank cyber heist

Sabelo Malunga, a 24-year-old final-year Computer Science student at Midlands State University, has appeared in court in Zimbabwe accused of orchestrating a cyberattack on CABS bank. The alleged heist resulted in a total loss of US$1,136,179.

Prosecutors allege that Malunga used his position as an IT intern between November and February to install SUPREMO, a remote-access program, on a bank-issued laptop. The software was reportedly hidden within system files to evade detection. The state claims Malunga continued to access the bank’s systems even after his internship concluded, using the malware to bypass internal security controls.

The breach was detected on March 27 after VISA flagged suspicious international ATM withdrawals. Subsequent investigations revealed 1,911 fraudulent ZIPIT transactions totaling US$925,679, alongside other fraudulent transfers. The stolen funds were allegedly moved to various accounts, including mobile money services like EcoCash and InnBucks, as well as accounts at CBZ and Ecobank.

CABS engaged the South African digital forensics firm MWR to investigate and remove the malware, a process that reportedly linked Malunga to the attack. Malunga faces hacking charges and has been remanded in custody pending a bail application. No funds have been recovered so far.