General News
Sophos Discovers Fake Apps Found on Apple’s App Store Used by Cybercriminals for CryptoRom Schemes

Sophos, a global leader in innovating and delivering cybersecurity as a service, on Wednesday released new findings on CryptoRom scams—elaborate financial fraud schemes that prey on and trick dating app users into making fake cryptocurrency investments—in its latest report, “Fraudulent Trading Apps Sneak into Apple and Google App Stores.”
The report details the first fake CryptoRom apps —Ace Pro and MBM_BitScan— to successfully bypass Apple’s strict security protocols.
Previously, cybercriminals used workaround techniques to convince victims to download illegitimate iPhone apps that were not sanctioned by the Apple App Store.
Sophos immediately notified Apple and Google; both have since removed the fraudulent apps from their respective stores.
“In general, it’s hard to get malware past the security review process in the Apple App Store. That’s why, when we originally began investigating CryptoRom scams targeting iOS users, the scammers would have to persuade users to first install a configuration profile before they could install the fake trading app.
“This obviously involves an additional level of social engineering—a level that’s hard to surmount. Many potential victims would be ‘alerted’ that something wasn’t right when they couldn’t directly download a supposedly legitimate app.

“By getting an application onto the App Store, the scammers have vastly increased their potential victim pool, particularly since most users inherently trust Apple,” said Jagadeesh Chandraiah, senior threat researcher, Sophos.
“Both apps are also not affected by iOS’ new Lockdown mode, which prevents scammers from loading mobile profiles helpful for social engineering. In fact, these CryptoRom scammers may be shifting their tactics—i.e., focusing on bypassing the App Store review process—in light of the security features in Lockdown.”
To lure the victim who was conned with Ace Pro, for instance, the scammers created and actively maintained a fake Facebook profile and persona of a woman supposedly living a lavish lifestyle in London.
After building a rapport with the victim, the scammers suggested the victim download the fraudulent Ace Pro app and the cryptocurrency fraud unfolded from there.
Ace Pro is described in the app store as a QR code scanner but is a fraudulent crypto trading platform. Once opened, users see a trading interface where they can supposedly deposit and withdraw currency. However, any money deposited goes directly to the scammers.
In order to get past App Store security, Sophos believes the scammers had the app connect to a remote website with benign functionality when it was originally submitted for review.
The domain included code for QR scanning to make it look legitimate to app reviewers. However, once the app was approved, the scammers redirected the app to an Asian-registered domain. This domain sends a request that responds with content from another host that ultimately delivers the fake trading interface.

MBM_BitScan is also an app for Android, but it is known as BitScan on Google Play. The two apps communicate with the same Command and Control (C2) infrastructure; this C2 infrastructure then communicates with a server that resembles a legitimate Japanese crypto firm. Everything else that is malicious is handled in a web interface, which is why it is hard for Google Play’s code reviewers to detect it as fraudulent.
CryptoRom, a subset of family of scams known as sha zhu pan literally “pig butchering plate”—is a well-organized, syndicated scam operation that uses a combination of romance-centered social engineering and fraudulent crypto trading applications and websites to lure victims and steal their money after gaining their confidence.
Sophos has been tracking and reporting on these scams that reap millions of dollars for two years.
Learn more about the criminals behind the CryptoRom rings and these fraudulent apps in “Fraudulent CryptoRom Trading Apps Sneak into Apple and Google App Stores” on Sophos.com.
General News
NCDC Raises Alarm over Lassa Fever Ravaging 18 States in Nigeria

Nigeria Centre for Disease Control and Prevention (NCDC) has raised alarm over ravage of Lassa fever cases across 18 states and 67 Local Government Areas (LGAs) of the country.

Dr Jide Idris, director-general of NCDC, in statement yesterday, said that Bauchi, Ondo, Taraba, Edo and Benue accounted for more than 80 per cent of confirmed cases recorded during the 2026 peak transmission season.
Idris, described as particularly worrisome the growing infections among healthcare workers, with 28 confirmed cases and three deaths reported so far this season.
NCDC attributed the sustained transmission and rising fatalities to operational gaps at the state level, urging urgent action to strengthen outbreak response and control measures.
According to Idris, field investigations showed most transmissions were occurring in known endemic areas, but weak implementation of established response frameworks had contributed to the continued spread and higher case fatality rate.
He said that gaps identified include infections in general outpatient and maternity settings, poor adherence to Infection Prevention and Control (IPC) protocols, and inadequate pre-positioning of Personal Protective Equipment (PPE).
He added that delayed patient presentation due to financial barriers, inconsistent activation of State Incident Management Systems, weak contact tracing, persistent stigma and poor isolation centre standards were also driving transmission.
Idris emphasised that outbreak response implementation and health service delivery fell primarily under state governments within Nigeria’s federal structure, urging them to strengthen accountability and resource allocation.
He called on affected and high-risk states to urgently activate and closely monitor their Incident Management Systems, ensuring timely coordination and efficient outbreak response at all levels of healthcare delivery.
He also urged the immediate release of response funds, strict enforcement of Infection Prevention and Control (IPC) compliance in public and private health facilities, and continuous availability of PPE and other critical supplies.
The NCDC boss also advocated accelerated financial protection mechanisms to reduce late presentation and high fatality rates, alongside institutionalised rodent control and environmental sanitation measures under a One Health approach.
He advised healthcare workers to maintain a high index of suspicion and adhere strictly to IPC guidelines.
He also urged the public to keep environments clean, prevent rodent entry into homes, store food safely and seek early medical care when symptoms appeared.
Idris noted that Lassa fever was treatable, with improved outcomes when detected early, adding that Nigeria was also responding to other epidemic-prone diseases including Cerebrospinal Meningitis, Diphtheria, Mpox and Cholera.
He reiterated NCDC’s toll-free emergency line, 6232, for reporting suspected cases and obtaining further information
General News
Lagos Deploys Drones, AI to Boost Traffic Response
The Lagos State Traffic Management Authority (LASTMA) has deployed a number of real-time digital solutions, including surveillance drones, GPS-enabled patrol vehicles, and automatic incident detection software.
![]()
The agency has also established a central command and control centre to reduce emergency response times and improve traffic safety throughout Lagos.
According to the agency, the digital transition will replace manual reporting and fragmented coordination with an integrated, data-driven platform capable of instantaneously detecting, verifying, and dispatching responders to crashes and breakdowns.
According to general manager Olalekan Bakare-Oki, LASTMA, body cameras, mobile data terminals, and toll-free hotlines now feed into a unified operations hub that gives real-time visibility of traffic situations across the state.
Incidents detected by digital surveillance are validated in real time and dispatched to the nearest patrol team using GPS tracking, while officers are instructed via modern communication devices.
According to the agency, the system has eliminated delays caused by poor event reporting and logistical constraints, enabling faster diversions, quicker clearance of accident scenes, and better coordination with medical and security agencies.
Field commanders and rescue teams now operate on synchronised data networks, allowing immediate decisions that reduce secondary crashes and prolonged congestion.
According to LASTMA’s 2025 operational summary, the agency rescued 1,075 people from crash scenes, and impounded 17,169 vehicles for various traffic violations across Lagos through its toll-free hotline.
These figures reflect how timely reporting and coordinated response have already reduced secondary accidents and eased congestion, according to the agency.
It went on to it achieved this with the toll-free reporting system, body cameras, and field coordination networks but with the newly deployed suite of smart technologies, the agency’s impact is poised to multiply.
Bakare-Oki said the upgrade aligns with the state’s smart-city agenda, positioning LASTMA as a technology-enabled public safety agency and laying the groundwork for faster, more reliable mobility management on Lagos roads.
General News
Purple Woman 3.0 Is Back, to Empower Women in Tech this IWD 2026

This International Women’s Day 2026, the world is saying “Give to Gain.” PalmPay is turning this message into action by empowering young women with the skills and resources to thrive in today’s fast evolving economy.

The PalmPay Purple Woman 3.0 is a 3-Day Digital Financial & Technology Masterclass created to bridge the gender gap in tech. The program is designed to equip women with practical, job ready skills while also providing job opportunities for career growth.
Launched in 2024, the Purple Woman initiative has impacted 150 women in specialized fields, including Data Analysis, Software Engineering, and Product Management, with learning resources and hands-on skills to launch them into the competitive job market.
From March 5–7, 2026, 100 women aged 18–30 will be selected through a competitive application process to participate in this year’s cohort. Over three immersive days, participants will receive hands-on training from industry experts in digital finance and technology.
And it doesn’t end there.
Ten outstanding participants will secure a 3-6month internship with PalmPay, gaining practical fintech experience that can shape their professional journey.
For participants of this initiative, the Purple Woman Program isn’t just about learning new skills, it’s about building networks, gaining confidence and unlocking bigger opportunities that will positively impact the trajectory of their careers.
For more information about the Purple Woman initiative, visit @PalmPayappng
E-Financial3 days agoIran-Israel-US Conflict and CBN’s FX Gains: A Stress Test for Nigeria’s Monetary Stability
E-Financial3 days agoMutual Benefits Assurance Reaffirms Full Regulatory Compliance, Enhanced Governance
General News3 days agoJAMB Uncovers AI-Driven Fraud Targeting UTME Candidates, Warns Parents
General News3 days agoSERAP Asks FCCPC to Investigate Google, Meta, Others over Alleged Rights Abuses
Telecom2 days agoSunil Bharti Mittal Conferred GSMA Lifetime Achievement Award for Transforming Global Telecommunications
News3 days agoTeamApt, Awabah Partner to Boost Pension Drive for Nigerians
News3 days agoFlashChange CEO, Bidemi Oke, Urges Startups to Build Strong Governance Structures Early
Telecom2 days agoWhy Digital Trust Matters: Secure, Responsible AI for African SMEs?


















