Ex-Air Force Members Sentenced for $2 Million Cyber Heist
Two former U.S. Air Force members have received prison sentences exceeding six years for orchestrating a sophisticated business email compromise scheme that defrauded organizations of over $2 million.
Two former members of the U.S. Air Force have been sentenced to significant prison terms for their involvement in a large-scale cyber theft operation. Chijioke Timothy Odimegwu, 25, and Harafat Mogaji, 26, were stationed at Dover, Delaware Air Force base when they executed a business email compromise (BEC) scheme that netted them over $2 million.
The duo employed a common but effective tactic: sending phishing emails to businesses to steal employee login credentials. Once inside email accounts, they monitored communications and inserted themselves into payment chains. By spoofing email addresses and sending "updated" wiring instructions, they successfully diverted payments between business partners into bank accounts they controlled. This allowed them to intercept funds that were intended for legitimate transactions.
Prosecutors detailed how Odimegwu and Mogaji targeted at least 15 victim organizations over a period of more than two years. In one particularly egregious instance, they diverted a $1.7 million payment destined for a victim in Iowa. Another diverted wire payment from an Ohio-based victim amounted to $720,000. The scheme's success was predicated on their ability to impersonate trusted entities and manipulate ongoing business communications.
Beyond redirecting payments, the pair also engaged in identity theft and access device fraud. They stole financial account information, including account numbers and credit/debit card details, from their victims. This stolen data was either used directly for fraudulent purchases or sold to other malicious actors on the dark web. The two men even traded stolen card information amongst themselves for personal use.
Both Odimegwu and Mogaji pleaded guilty in June to charges including wire fraud, identity theft, and access device fraud. On Friday, Odimegwu was sentenced to over nine years in prison and ordered to pay $366,617 in restitution. Mogaji received a 6.5-year sentence and was ordered to pay $995,680 in restitution. Both will also serve three years of supervised release following their incarceration.
The FBI and local law enforcement agencies were instrumental in apprehending the individuals. Their sentencing comes shortly after another former U.S. soldier was sentenced to over five years for hacking telecommunications companies and leaking sensitive records, underscoring the growing concern over internal threats and cybercrime within military ranks.
This case serves as a stark reminder of the persistent threat posed by BEC scams and the severe consequences faced by those involved. The military's reliance on digital systems and the potential for insider threats highlight the need for robust cybersecurity measures and vigilant internal oversight.