E-Business
Firm Discovers New Crypto-stealing Trojan in AppStore, Google Play

Kaspersky Threat Research expertise center has discovered a new data-stealing Trojan, SparkCat, active in AppStore and Google Play since at least March 2024. This is the first known instance of optical recognition-based malware appearing in AppStore.

SparkCat uses machine learning to scan image galleries and steal screenshots containing cryptocurrency wallet recovery phrases. It can also find and extract other sensitive data in images, such as passwords. Kaspersky has reported known malicious applications to Google and Apple.
How the new malware spreads
The malware is spreading through both infected legitimate apps and lures – messengers, AI assistants, food delivery, crypto-related apps, and more. Some of these apps are available on official platforms in Google Play and AppStore.
Kaspersky telemetry data also shows that infected versions are being distributed through other unofficial sources. In Google Play, these apps have been downloaded over 242,000 times.
Who is being targeted
The malware primarily targets users in the UAE and countries in Europe and Asia. This is what experts concluded based on both the information about the operational areas of the infected apps and the technical analysis of the malware.
SparkCat scans image galleries for keywords in multiple languages, including Chinese, Japanese, Korean, English, Czech, French, Italian, Polish, and Portuguese. However, experts believe victims could be from other countries as well.
How SparkCat works
Once installed, in certain scenarios the new malware requests access to view photos in a user’s smartphone gallery. It then analyses the text in stored images using an optical character recognition (OCR) module. If the stealer detects relevant keywords, it sends the image to the attackers.
The hackers’ primary goal is to find recovery phrases for cryptocurrency wallets. With this information, they can gain full control over a victim’s wallet and steal funds. Beyond stealing recovery phrases, the malware is capable of extracting other personal information from screenshots, such as messages and passwords.
“This is the first known case of OCR-based Trojan to sneak into AppStore,” said Sergey Puzan, malware analyst at Kaspersky. “In terms of both AppStore and Google Play, at the moment it’s unclear whether applications in these stores were compromised through a supply chain attack or through various other methods. Some apps, like food delivery services, appear legitimate, while others are clearly designed as lures.”
“The SparkCat campaign has some unique features that make it dangerous. First of all, it spreads through official app stores and operates without obvious signs of infection. The stealthiness of this Trojan makes it hard to discover it for both store moderators and mobile users.
Also, the permissions it requests seem reasonable, making them easy to overlook. Access to the gallery that the malware attempts to reach may seem essential for the app to function properly, as it appears from the user perspective. This permission is typically requested in relevant contexts, such as when users contact customer support,” added Dmitry Kalinin, malware analyst at Kaspersky.
Analysing Android versions of the malware, Kaspersky experts found comments in the code written in Chinese. Additionally, the iOS version contained developer home directory names, “qiongwu” and “quiwengjing”, suggesting that the threat actors behind the campaign are fluent in Chinese. However, there is not enough evidence to attribute the campaign to a known cybercriminal group.
ML-powered attacks
Cybercriminals are increasingly paying attention to neural networks in their nefarious tools. In the case of SparkCat, the Android module decrypts and executes an OCR-plugin using the Google ML Kit library to recognise text in stored images. A similar method was used in its iOS malicious module.
E-Business
NDPC Commits to Balancing Data Privacy, Protection Information

Nigerian Data Protection Commission (NDPC), has expressed its commitment to balance information around data privacy and protection.

Dr. Vincent Olatunji, national commissioner, NDPC, stated this in Abuja, at the National Data Privacy Summit with the theme, “Privacy in the Era of Emerging Technologies,” organised by the commission.
Olatunji said the NDPC, at the moment, was looking at balancing information around data privacy and protection.
“What we are doing is just to look at how to balance information around privacy and protection, which is really important, because as we are innovating, at the same time, we have to consider issues around privacy and protection,” he stated.
He added that the commission has been very bold in taking risks that would bring about growth.
“Our starting point is growing at a very alarming rate, and we are not afraid of anything. We can take risks. And that is why a lot is happening in Nigeria, and this is the level of clarity,” he explained.
In his address, Dr. Aminu Maida, executive vice chairman (EVC) of the Nigerian Communications Commission (NCC), stated that Internet of Things holds promise for Nigeria’s economy.
The EVC, who was represented by Abraham Oshadami, executive commissioner, Technical Services (ECTS), noted that, “in an era in which digital assets, Internet of Things, future digital computing and other transformative technologies are key, and both a cornerstone of building trust for the adoption and a prerequisite for sustainable progress.
“Emerging technologies hold immense promise for Nigeria’s grand economy, but they also introduce complex risks to personal and individual rights.
“So, balancing innovation through post-ethical safeguards and public trust is the first step to ensuring that global digital advancement benefits all Nigerians without compromising their privacy or their security,” he added.
“As we just heard from the Nigeria Police, telecom operators have a vast amount of sensitive historical information daily, including connectivity apps and collaboration on privacy, security, and number protection, both to their and their inheritors,” he said.
Dr. Bako Shurkuk, commissioner for Science, Technology and Innovation, Plateau State, who represented Caleb Mutfwang, Governor of Plateau State, said, emerging technologies can be harnessed to attain sustainable growth.
E-Business
OADC Lagos Reinforces Commitment to Local Data Hosting and Digital Transformation @ NDPC’s National Privacy Week Summit

Open Access Data Centres (OADC) Lagos has reaffirmed its commitment to Nigeria’s data protection and digital transformation agenda through its sponsorship and active participation in the Nigeria Data Protection Commission’s (NDPC) National Privacy Week Summit.

The National Privacy Week Summit, organised by the NDPC, convened policymakers, regulators, technology providers, and industry stakeholders to promote data privacy awareness, strengthen compliance with the Nigeria Data Protection Act (NDPA), and advance conversations around data security, sovereignty, and responsible data governance.
As a sponsor of the event, OADC Lagos demonstrated its continued support for the Federal Government’s drive toward local data hosting and data domiciliation, which are increasingly critical to safeguarding sensitive information, enhancing regulatory compliance, and building trust in Nigeria’s digital economy.
Through its carrier-neutral, Tier III Design certified data centre in Lekki, Lagos, OADC provides secure, resilient, and compliant infrastructure that enables government institutions and private sector organisations to host and manage data locally while meeting international best practices.
Commenting on the engagement, Adesola Adesugba, Country Marketing Manager, Open Access Data Centres Nigeria, said: “We are proud to have supported the Nigeria Data Protection Commission through the National Privacy Week Summit and to stand alongside the government in advancing Nigeria’s digital transformation objectives.
“Strengthening local data hosting and domiciliation is fundamental to national data sovereignty, improved security, and sustainable digital growth, and OADC Lagos remains committed to enabling this future.”
OADC’s participation at National Privacy Week Summit underscores its role as a trusted digital infrastructure partner to government and enterprise, supporting secure cloud connectivity, regulatory compliance, and the long-term development of Nigeria’s digital ecosystem.
Open Access Data Centres is part of the WIOCC Group and operates open-access, world-class data centres across Africa, serving cloud providers, network operators, enterprises, and public sector institutions.
E-Business
Kaspersky Launches OT Calculator to Align Cybersecurity Investments with Business Goals

Kaspersky’s new online tool has been specially developed for industrial organisations to assess the potential costs associated with insufficient operational technology (OT) security.

By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions regarding security investments.
Industrial organisations increasingly depend on interconnected systems, elevating cybersecurity to a critical factor in business resilience and profitability.
According to VDC Research, over 60% of industrial companies last year reported that cybersecurity breaches had led to significant costs. Despite this, a persistent disconnect remains between security teams and executive leadership as security professionals focus on minimising risk, while executives must balance cybersecurity concerns with broader business objectives. This misalignment often results in competing priorities and underfunded security initiatives.
To bridge this gap, Kaspersky has launched the OT Cybersecurity Savings Calculator, an innovative online tool designed specifically for industrial organisations to assess the potential costs of inadequate operational technology (OT) security¹.
The primary aim of this tool is to translate cyber risks into tangible financial metrics and support strategic discussions around priorities and budget allocation. By entering details such as their sector, sub-sector, region, company size, breach history, and existing cybersecurity measures, organisations can estimate their potential cost savings and receive customised, actionable recommendations.
The calculator benchmarks performance against industry peers and highlights the company’s position within the current threat landscape.
“We believe this calculator is a powerful resource for transforming complex cyber risk data into straightforward financial insights. It enables OT leaders, security professionals, and executive teams to develop clear, data-driven business cases and recognise the value of cybersecurity investments. With actionable guidance, it promotes a comprehensive approach to resource management and strengthens overall organisational resilience,” comments Andrey Strelkov, Head of Industrial Cybersecurity Product line at Kaspersky.
E-Financial3 days agoAccidental Billionaire Opts for Jail Instead of Returning Money Credited Him by Mistake
News3 days agoUS Set to Deport 79 Nigerians on Criminal List
News3 days agoUngoverned AI is Quietly Scaling Risk in Nigeria – Dr. Naiho
Telecom3 days agoAirtel Nigeria Commits to Boosting Nigeria’s Digital Infrastructure
E-Financial3 days agoSEC Warns of Potential Ponzi-style Risks in AURUM BOT, ModMount
E-Business2 days agoOADC Lagos Reinforces Commitment to Local Data Hosting and Digital Transformation @ NDPC’s National Privacy Week Summit
News1 day agoNew Study Reveals How Moniepoint Powers Nigeria’s Downstream Oil Sector with Same-Day Settlements and Working Capital Boost
Telecom3 days agoGoogle, African Partners Launch WAXAL to Empower 100m Africans in AI Era



















