Connect with us

E-Financial

Kaspersky Warns: Faketoken Mobile Banking Trojan Targeting Over 2000 App

Published

on

Kaspersky.jpg
Kindly share this post

Kaspersky Lab experts have discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data. Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications

Kaspersky Lab experts, late December 2016, discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data.

Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications.

“To date, the modified Faketoken has claimed over 16,000 victims in 27 countries, with most located in Russia, Ukraine, Germany and Thailand.

“The newly added data-encryption capability is unusual in that most mobile ransomware focuses on blocking the device rather than the data, which is generally backed-up to the cloud. In Faketoken’s case, the data – including documents and media files such as pictures and videos – is encrypted using an AES symmetric encryption algorithm that can, in some cases, be decrypted by the user without paying a ransom.

Advertisement

“During the initial infection process, the Trojan demands administrator rights, permission to overlay other apps or to be a default SMS application – often leaving users with little or no choice but to comply. Among other things, these rights enable Faketoken to steal data: both directly, like contacts and files, and indirectly, through phishing pages”.

The IT security giant said that the Trojan is designed for data theft on an international scale: once all the necessary rights are in place, it downloads a database from its command and control server containing phrases in 77 languages for different device localizations.

These are used to create phishing messages to seize passwords from users’ Gmail accounts, the report said, the Trojan can also overlay the Google Play Store, presenting a phishing page to steal credit card details.

In fact, the Trojan can download a long list of applications for attack and even an HTML template page to generate phishing pages for the relevant apps. Kaspersky Lab researchers uncovered a list of 2,249 financial applications.

Intriguingly, the modified Faketoken also tries to replace with its own versions application shortcuts for social media networks, instant messengers and browsers. The reason for this is unclear as the substitute icons lead to the same legitimate applications.

Advertisement

Kaspersky Lab advises Android users to take the following steps to protect themselves against the Faketoken Trojan and other malware threats:

Ensure all data is backed-up.
Don’t automatically agree to hand over rights and permissions when an app asks you to do so – think about what is being asked for, and why you are being asked for it.

Install an antimalware solution on all devices and keep OS software up-to-date.

Kaspersky Lab has detected several thousand Faketoken installation packages capable of encrypting data, the earliest of which dates back to July 2016.  Kaspersky Lab products detect all modifications of the Faketoken malware family.

“The latest modification of the Faketoken mobile banking Trojan is interesting in that some of the new features appear to provide limited additional benefit for the attackers.  That doesn’t mean we shouldn’t take them seriously.  They may represent the groundwork for future developments, or reveal the ongoing innovation of an ever-evolving and successful malware family. In exposing the threat, we can neutralize it, and help to keep people, their devices and their data safe,” said Roman Unuchek, Senior Malware Analyst, Kaspersky Lab.

Advertisement

 

Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

FG Suspends NAICOM’s N680m Insurance Recapitalisation Fees

Published

on

Kindly share this post

Federal Ministry of Finance has halted enforcement of about N680 million in disputed fees imposed by the National Insurance Commission (NAICOM) on NICON Insurance Limited and Nigeria Reinsurance Corporation (Nig Re) as part of the ongoing insurance industry recapitalisation exercise.

FG Suspends NAICOM’s N680m Insurance Recapitalisation Fees

The Ministry also directed NAICOM to suspend its demand that the two companies transfer their entire recapitalisation funds into an escrow account with the Central Bank of Nigeria (CBN), pending determination of a petition challenging the legality of the charges and the directive.

The intervention followed a July 27, 2026 petition by NICON and Nig Re over what they described as unlawful fees and regulatory demands arising from the implementation of the Nigerian Insurance Industry Reform Act (NIIRA) 2025.

In a letter to the Commissioner for Insurance, Raymond Omachi, permanent secretary, Federal Ministry of Finance, on behalf of Taiwo Oyedele, minister of Finance and coordinating minister of the Economy, requested that NAICOM provide a detailed response and legal justification for the disputed requirements.

The Ministry specifically directed the Commission to suspend enforcement of the contested processing and verification fees, the one per cent Capital Injection Fee, and the directive requiring the companies to transfer their full recapitalisation funds to a CBN escrow account.

Advertisement

The dispute centres on NAICOM’s assessment of a one per cent fee on capital injected by operators, alongside additional processing and verification charges prescribed under Appendix 2 of the Commission’s Minimum Capital Requirement Guidelines.

According to the petition, the combined assessments amounted to N305 million for NICON and N375 million for Nig Re, bringing the disputed charges to N680 million.

The companies are also challenging what they described as an unconstitutional requirement to transfer more than the statutory proportion of their recapitalisation funds to the CBN.

They contend that Section 16(3) of NIIRA 2025 provides for a 10 per cent statutory deposit, and not the transfer of the entire capital injection into an escrow account.

The companies told the Ministry that they had already met the July 31, 2026 recapitalisation deadline.

Advertisement

NICON said it injected N420 billion, while Nig Re injected N30 billion into Mudaraba Term Deposit accounts with Lotus Bank Limited. The companies maintained that the amounts exceeded their adjusted recapitalisation requirements of N16 billion and N28 billion, respectively.

They further stated that they had deposited N42.5 billion and N43.5 billion respectively with the CBN, in compliance with the statutory deposit requirement under Section 16(3) of the new law.

The companies also disclosed that they had made initial payments of N480 million and N75 million, respectively, in fees.

The Finance Ministry’s directive effectively places the disputed charges and escrow requirement on hold while NAICOM is expected to justify the legal and regulatory basis for its actions.

The intervention could have wider implications for the insurance industry’s recapitalisation programme, particularly as operators face regulatory deadlines to strengthen their capital base under the new insurance law.

Advertisement

The controversy also raises questions about the extent to which regulatory guidelines can impose additional financial obligations on operators beyond those expressly provided for under the enabling legislation.

NAICOM is now expected to respond to the Ministry’s request and explain the statutory basis for the one per cent capital injection fee, the additional processing and verification charges, and the requirement for the full capital injection to be transferred into a CBN escrow account.

Kindly share this post
Continue Reading

E-Financial

SEC Moves to Recover Unclaimed Dividends, Inherited Investments Nationwide

Published

on

Kindly share this post

The Securities and Exchange Commission (SEC) has launched a nationwide awareness campaign aimed at helping investors and beneficiaries recover unclaimed dividends and inherited investments, as part of efforts to strengthen investor protection and reduce the volume of dormant assets in Nigeria’s capital market.

The initiative, unveiled in Abuja through the Probate/Unclaimed Monies Awareness and Investor Clinic, seeks to educate investors, beneficiaries and estate executors on probate procedures, estate administration and the processes involved in accessing financial assets left behind by deceased relatives.

Speaking at the event, Dr Emomotimi Agama, the Director-General of the SEC, said the Commission was addressing a long-standing challenge that had prevented many families from accessing investments belonging to deceased relatives.

Agama said many beneficiaries face difficulties obtaining probate, letters of administration, death certificates and other documents required to claim shares, dividends and other financial assets.

“For many Nigerian families, the death of a loved one who held shares, dividends or other investments marks the beginning of a long and often confusing journey,” he said.

Advertisement

According to him, the complexity surrounding estate administration often leaves beneficiaries unable to access legitimate investments and other financial assets inherited from deceased relatives.

He described unclaimed dividends and dormant assets as a major concern for the Nigerian capital market, noting that the funds represent money that should be benefiting families but remains idle because beneficiaries are unable to access them.

“Across our market, unclaimed dividends and dormant assets represent real money—money that belongs to real families, sitting idle, disconnected from the people it was meant to serve,” Agama said.

The SEC DG said the Commission was committed to bridging the gap through policy reforms, investor education and sustained engagement with investors, beneficiaries and other stakeholders in the capital market.

He stressed the importance of ensuring that investors and their families were adequately informed about the procedures for documenting, preserving and transferring financial assets to beneficiaries.

Advertisement

Agama said the awareness campaign would also provide an avenue for members of the public to better understand probate processes and the requirements for recovering unclaimed monies and inherited investments.

Also speaking, the Acting Chief Executive Officer of Meristem Registrars and Probate Services Limited, Ms Nkechinyelu Okoye, identified poor awareness and inadequate estate planning as major factors contributing to the accumulation of unclaimed financial assets.

Okoye said some beneficiaries were unaware that financial assets such as shares and dividends formed part of a deceased person’s estate, while others did not know that their deceased relatives had investments in the capital market.

She added that some beneficiaries were also unfamiliar with the documentation and legal procedures required to establish their entitlement and successfully claim the assets.

According to her, these challenges often result in financial assets remaining unclaimed for extended periods, even when legitimate beneficiaries are available.

Advertisement

The initiative is expected to improve public awareness of probate and estate administration procedures while helping more families identify and recover investments and other financial assets belonging to them.

It is also part of broader efforts to reduce the volume of unclaimed dividends and dormant assets in the capital market and ensure that funds belonging to investors and their beneficiaries are returned to their rightful owners.

Kindly share this post
Continue Reading

E-Financial

FG Spent N3.1 Trillion on Domestic Debt Servicing in Q1- DMO

Published

on

Kindly share this post

Debt Management Office (DMO) said the federal government spent N3.14 trillion on servicing its domestic debt in the first quarter  of 2026.

FG Spent N3.1 Trillion on Domestic Debt Servicing in Q1- DMO

The office disclosed the data in its latest domestic debt service report for Q1 2026.

The figure comprises N2.97 trillion in interest payments and N169.68 billion in principal repayments.

The agency said in January, the government spent N741.82 billion on domestic debt service, while the figure rose to N967.67 billion in February.

Debt service increased further to N1.43 trillion in March, bringing the total for the quarter to N3.14 trillion.

Advertisement

The March figure was 47.7 percent higher than the N967.67 billion recorded in February and 92.7 percent above the N741.82 billion spent in January.

Also, the debt office said interest payments accounted for about 94.6 percent of total domestic debt service during the quarter.

The DMO said treasury bills accounted for the largest share of interest payments at N1 trillion, while interest on federal government bonds stood at N1.96 trillion.

The agency said the government also paid N4.24 billion in interest on FGN savings bonds during the period.

The DMO said the principal component of the debt service comprised N169.68 billion in repayments on local-denominated promissory notes.

Advertisement

Overall, the government’s domestic debt service rose sharply through the quarter, with March accounting for almost half of the N3.14 trillion spent between January and March.

Nigeria’s public debt increased by 0.01 percent to N159.35 trillion in the Q1 of 2026.

 

Kindly share this post
Continue Reading

Trending