SOFTWARE UNIVERSE-A MOBILE BANKING SERVICE PROVIDER THAT HACKS AND DEFRAUDS ITS BANKING CLIENTS

Software Universe http://www.softwareuniverse.co.ke/ is a mobile banking service provider that defrauds its banking clients.This firm has deployed its mobile banking service platform called WAP-TX for a number of banks from tier 1 to tier 3 banks.Unfortunately some of the organization's current and former staff have been running a fraud syndicate there they have been pilfering money from these banks via their mobile banking platform for several years.They have at defrauded at least 5 banks.Due to reputation risk,the said banks choose not to publicize the frauds but some opt to quietly terminate their contract with Software Universe and employ a new mobile banking vendor.Some banks still retain the vendor even after being defrauded.Since no defrauded bank pursues and prosecutes the vendor and fraudsters,the thieves operate with impunity and have stolen from banks repeatedly.Some of the fraudsters names are Dima Odhiambo,Wilson Wamutte and Stanford Momanyi and their photos are attached.Lets expose and shame them

This dubious vendor has become very skilled in bribing IT Heads and internal fraud investigators of the banks he has defrauded not to prosecute
him and his fraudsters.Banks report these frauds to Banking Fraud Investgation Unit where these cops are also greased to conduct shody,incomplete
probes that never implicate the vendor but are just as a formality to get insurance compensation.Thus the vendor and his fraudsters are never made accountable
for their crimes and operate with impunity to defraud again and again.Some banks have even been defrauded more than once by the same vendor with no action taken against them.

Some of the banks that have been pilfered include Family Bank,Housing Finance and Trans-National Bank.

These criminals take advantage that their underlying program source code is encrypted and proprietary to program loopholes into their system that internal IT staff of banks have no access to and cannot detect.They select the least busiest time of the week ie Sunday midnight when few or no IT staff are in banks to carry out their heist.Their preferred method is to use the Mobile App platform that they set up for banks whereby using their malicious code they masquerade as genuine customers and perform mass Bank to M-Pesa transfers from several high net worth accounts into their M-Pesa accounts and pilfer millions of shillings in a single hacking attack.

The frauds are not being done at database level where database is already secured with a password that the vendor isnt aware of.The frauds are being committed at application level where the vendor has conveniently encrypted his application code to conceal it from scrutiny from the banks IT staff and any other parties by claiming the programs are proprietary and should not be reviewed by other stakeholders.Its common acceptable practice for vendors to encrypt their programs as they are proprietary eg you dont have access to underlying code of Microsoft Windows Operating System. Also,even if the code was made available,the programs constitute thousands of lines of code thus its quite impossible of internal IT staff to review each code line to assess what is malicious from what is genuine not unless you developed the system.From the encrypted application code,the vendors are able to easily introduce malicious code that other stakeholders cannot detect and thus defraud banks at their pleasure hence the vendor doesnt need to have direct access to the database to perform their heists.In fact the fraudsters dont even need to be at the banks premises to undertake their vice.Through the mobile app deployment at their premises the vendor uses the connectivity between the bank and his premises to pilfer money.

Surely you take us to be idiots,?

The banks that have been defrauded are also poor performers

Co-operative Bank,National Bank and Commercial Bank of Africa have also been defrauded by these criminals in prior years

At least Co-op,NBK,Trans-National Bank and Family Bank had the sense to throw out this vendor after the firm defrauded them.

HF Group and the then CBA (now NCBA) still retain this dubious outfit as their mobile banking service provider.Why?Its because one George Njuguna,who was before the Head of IT at CBA and later Chief Information Officer of HF Group protected the vendor from retribution.George now serves as Chief Information Officer at Safaricom.George's picture is as below