E-Financial
Kaspersky Warns: Faketoken Mobile Banking Trojan Targeting Over 2000 App

Kaspersky Lab experts have discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data. Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications
Kaspersky Lab experts, late December 2016, discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data.
Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications.
“To date, the modified Faketoken has claimed over 16,000 victims in 27 countries, with most located in Russia, Ukraine, Germany and Thailand.
“The newly added data-encryption capability is unusual in that most mobile ransomware focuses on blocking the device rather than the data, which is generally backed-up to the cloud. In Faketoken’s case, the data – including documents and media files such as pictures and videos – is encrypted using an AES symmetric encryption algorithm that can, in some cases, be decrypted by the user without paying a ransom.
“During the initial infection process, the Trojan demands administrator rights, permission to overlay other apps or to be a default SMS application – often leaving users with little or no choice but to comply. Among other things, these rights enable Faketoken to steal data: both directly, like contacts and files, and indirectly, through phishing pages”.
The IT security giant said that the Trojan is designed for data theft on an international scale: once all the necessary rights are in place, it downloads a database from its command and control server containing phrases in 77 languages for different device localizations.
These are used to create phishing messages to seize passwords from users’ Gmail accounts, the report said, the Trojan can also overlay the Google Play Store, presenting a phishing page to steal credit card details.
In fact, the Trojan can download a long list of applications for attack and even an HTML template page to generate phishing pages for the relevant apps. Kaspersky Lab researchers uncovered a list of 2,249 financial applications.
Intriguingly, the modified Faketoken also tries to replace with its own versions application shortcuts for social media networks, instant messengers and browsers. The reason for this is unclear as the substitute icons lead to the same legitimate applications.
Kaspersky Lab advises Android users to take the following steps to protect themselves against the Faketoken Trojan and other malware threats:
Ensure all data is backed-up.
Don’t automatically agree to hand over rights and permissions when an app asks you to do so – think about what is being asked for, and why you are being asked for it.
Install an antimalware solution on all devices and keep OS software up-to-date.
Kaspersky Lab has detected several thousand Faketoken installation packages capable of encrypting data, the earliest of which dates back to July 2016. Kaspersky Lab products detect all modifications of the Faketoken malware family.
“The latest modification of the Faketoken mobile banking Trojan is interesting in that some of the new features appear to provide limited additional benefit for the attackers. That doesn’t mean we shouldn’t take them seriously. They may represent the groundwork for future developments, or reveal the ongoing innovation of an ever-evolving and successful malware family. In exposing the threat, we can neutralize it, and help to keep people, their devices and their data safe,” said Roman Unuchek, Senior Malware Analyst, Kaspersky Lab.
E-Financial
CBN Introduces Stricter BVN Rules to Curb Fraudulent Transactions

Central Bank of Nigeria (CBN) has introduced stricter rules guiding the use and management of the Bank Verification Number (BVN) as part of efforts to reduce fraudulent transactions within the financial system.The revised framework, which takes effect from May 1, includes tighter controls on BVN enrolment, data access and customer information updates.

The apex bank said the measures are aimed at strengthening identity management, improving fraud monitoring and safeguarding the integrity of banking transactions.
Under the new guidelines, BVN enrolment is now restricted to individuals aged 18 and above, while customers will only be allowed to change the phone number linked to their BVN once.
The restriction is designed to curb identity manipulation often exploited by fraudsters through repeated updates of personal information.
The CBN also directed financial institutions to maintain a temporary watchlist for BVNs linked to suspicious transactions.
Affected BVNs may be flagged for up to 24 hours, during which customers are expected to verify or clarify flagged transactions before further action is taken.
In addition, access to BVN data has been tightened, with the apex bank retaining exclusive control over the database while granting access only to licensed financial institutions under defined conditions.
The move, according to the CBN, is expected to enhance data security and support a more resilient financial system as BVN enrolment continues to grow.
E-Financial
Binance is Missing from Ghana’s Crypto Sandbox

Ghana’s Securities and Exchange Commission has given the nod to 11 crypto trading platforms to participate in its new regulatory sandbox programme, its first major step in support of crypto after passing a law to provide the local market with regulatory clarity in December.

The big news however is that Binance, the world’s largest crypto exchange by trading volume is nowhere on the list, raising questions about the crypto exchange’s future in one of West Africa’s fastest-growing digital asset markets.
Newsghana reported that industry analysts covering the sandbox launch specifically flagged Binance as a notable absent player, alongside Yellow Card, whose mobile payment product Yellow Pay had previously been warned against by the Bank of Ghana (BoG) for operating without authorisation. Neither company has publicly explained its absence from the cohort.
For Binance, the omission carries particular weight. The exchange has cultivated a visible presence in Ghana for several years, including direct engagement with regulators, public financial literacy campaigns, and the presence of senior representatives in Accra.
Despite that groundwork, it did not secure a place in the inaugural sandbox when the Securities and Exchange Commission (SEC) published its list of approved Virtual Asset Service Providers (VASPs) on March 10, 2026.
Analysts have pointed to Binance’s ongoing legal battle in neighbouring Nigeria as a factor likely complicating its regulatory position across the region.
And the Nigeria Revenue Service (NRS) is pursuing Binance for an $81.5 billion claim covering alleged economic losses and unpaid taxes, arguing the exchange has a significant economic presence that makes it liable for corporate income tax for 2022 and 2023, along with a 10 percent annual penalty on outstanding amounts.
The stakes of remaining outside Ghana’s regulatory framework are rising fast.
The BoG made clear on March 5, 2026, that all VASPs operating within Ghana’s jurisdiction including those serving Ghanaian residents through digital platforms with no physical office in the country must register with the Bank.
Firms that do not comply face sanctions and potential disqualification from future licensing.
Ghana’s digital asset market has grown rapidly, recording over $10 billion in cryptocurrency transactions by November 2025, up from roughly $6 billion the year before, making it one of West Africa’s most active markets.
With over three million users estimated to be active in the ecosystem, the country represents a market Binance cannot easily afford to be shut out of through regulatory non-compliance.
The eleven sandbox participants will effectively serve as the reference models for what a compliant licensed VASP looks like under Ghana’s framework.
Those that perform well within the first six months may transition to full licensing early, while those that fall short risk being shut out of the regulated market once the sandbox period concludes.
Binance did not respond to a request for comment before publication. The SEC Ghana and BoG have not publicly commented on why specific companies were excluded from the first sandbox cohort.
E-Financial
World Bank Debars 3 PwC Subsidiaries for 21 Months over Alleged Project Fraud

World Bank Group has debarred three African subsidiaries of global advisory firm, PricewaterhouseCoopers (PwC), for 21 months after being allegedly found guilty of manipulating procurement processes for a major cross-border electricity project.

In a statement, the Washington-based multilateral lender said PricewaterhouseCoopers Associates Africa Ltd, based in Mauritius, along with its Kenyan and Rwandan affiliates, engaged in “collusive and fraudulent practices” linked to the Eastern Electricity Highway Project, a flagship initiative to transmit hydropower from Ethiopia to Kenya.
The decision sidelines PwC from lucrative World Bank-funded projects on the continent, dealing a blow to one of the region’s most influential audit and advisory firms.
This development could reshape competition for high-value consulting work across emerging markets, potentially disrupting startups and tech firms reliant on World Bank funding, as scrutiny over governance and compliance tightens.
The World Bank, through its private sector arm, International Finance Corporation (IFC), offers grants and low-interest loans to startups across emerging markets.
Earlier this week, the IFC committed $20 million to invest in high-growth startups in Kenya, Nigeria, and South Africa.
“The debarment makes PwC Associates, PwC Kenya, PwC Rwanda, and any affiliates they control ineligible to participate in Bank Group-financed projects and operations,” the World Bank said.
“It is part of a settlement agreement under which the three companies admit culpability for sanctionable practices.”
The determination was based on the company’s conduct between 2019 and the award of contracts for consultancy services and asset valuation work for the Ethiopian state power utilities.
According to the World Bank statement, the firm obtained confidential procurement documents to improperly influence the award of a contract for the implementation of International Financial Reporting Standards at the Ethiopian Electric Power Corporation.
They also attempted to steer a separate contract for a fixed asset inventory and revaluation for the power utility towards PwC Associates.
During the bidding and execution of that contract, the bank found that the company misrepresented the availability and qualifications of key experts and failed to disclose the full list of subconsultants involved.
According to the World Bank, the debarment is shorter than would otherwise apply because PwC admitted misconduct.
The advisory firm also agreed to a series of remedial measures, including internal investigations, disciplinary action against responsible staff, terminating relationships with all subconsultants involved, and additional staff training.
E-Financial2 days agoKuda MFB Increases Kuda for Her Business Grants to ₦10 Million
News3 days agoKaspersky Discovers Infostealers Mimicking Claude Code, OpenClaw and Other AI Developer Tools
General News3 days agoBanks, Offices to Close for Thursday and Friday for Eid-el-Fitr
Telecom3 days agoNigeria, Ghana Trigger Stunning 45 Percent Surge in MTN Dividends
E-Financial3 days agoSEC Shuts Over 400 Fraudulent Investment Schemes, Arrests Operators
Telecom2 days agoVitel Wireless Lures Subscribers with “Data that Never Expires” Campaign
Telecom3 days agoATCIS Urges FG to Ensure Safety of Consumers Data
News2 days agoBoI, MTN Foundation Launch N1Bn Fund for Women Entrepreneurs













