E-Business
Cybercriminals Use Darknet to Sell Malicious Google Play Apps for up to US$20,000

After analysing offers of malicious apps on Google Play that are for sale on the Darknet, Kaspersky experts have discovered that malicious mobile apps and store developer accounts are being sold at up to US$20,000.
Using Kaspersky Digital Footprint Intelligence, researchers collected examples from nine different Darknet forums where the purchase and sale of goods and services related to malware is carried out.
The report sheds light on how threats sold on the Darknet appear on Google Play and also reveals the offers available, price range and features of communication and agreements between cybercriminals.
Even though official app stores are vigorously policed, moderator services can’t always catch malicious apps before they’re uploaded. Every year a vast range of malicious apps are deleted on Google Play only after victims have been infected.
Cybercriminals gather on the Darknet – a whole underground digital world with its own rules, market prices, and reputational institutions – to buy and sell Google Play malicious apps, and additional functions to upgrade and even advertise their creations.
Like on legitimate forums for selling goods, there are also various Darknet offers for different needs and customers with different budgets. To publish a malicious app, cybercriminals need a Google Play account and a malicious downloader code (Google Play Loader).
A developer account can be bought cheaply, for US$200 and sometimes even for as little as US$60. The cost of malicious loaders ranges between US$2,000 and $20,000, depending on the complexity of malware, the novelty and prevalence of malicious code, as well as the additional functions.
Most often, the malware being distributed is suggested to be hidden under cryptocurrency trackers, financial apps, QR-code scanners and even dating apps. Cybercriminals also highlight how many downloads the legitimate version of that app has, which means how many potential victims can be infected by updating the app and adding malicious code to it. Most frequently the suggestions specify 5,000 downloads or more.
For an additional fee, cybercriminals can obfuscate the application code to make it harder to detect by cybersecurity solutions. To increase the number of downloads to a malicious app, many attackers also offer to purchase installs – directing traffic through Google ads and attracting more users to download the app. Installs cost differently for each country.
The average price is US$0.50, with offers ranging from US$0.10 to several dollars. In one of the discovered offers, advertisements for users from the USA and Australia cost the most – US$0.80.
Fraudsters offer three kinds of work: for a share of the final profit, rent, and full purchase of either an account or a threat. Some sellers even hold auctions to buy their goods, since many sellers limit the number of lots sold.
For example, in one offer that was found, the starting price was US$1,500, with $700 incremental steps in the auction, and the blitz – the instant purchase for the highest price – was $7,000.
Darknet sellers can also offer to publish the malicious app for the buyer so they do not directly interact with Google Play, but can still remotely receive all of the victims’ detected data.
It may seem that in such a case the developer can easily deceive the buyer, but it is common among Darknet sellers to preserve and maintain their reputation, promise guarantees, or accept payment after the terms of the agreement have been completed.
To reduce risks when making deals cybercriminals often resort to the services of disinterested intermediaries, known as “escrow”. The escrow may become a special service and supported by a shadow platform, or a third party who is not interested in the results of the transaction.
“Malicious mobile apps continue to be one of the top cyberthreats targeting users, with more than 1.6 million mobile attacks detected in 2022. At the same time, the quality of cybersecurity solutions that protect users from these attacks is also increasing.
On the Darknet, we found messages from cybercriminals complaining how it is now much harder for them to upload their malicious apps to official stores. However, this also means that they will now come up with much more sophisticated circumvention schemes, so users should stay alert and carefully check which apps they are downloading,” comments Alisa Kulishenko, security expert at Kaspersky.
E-Business
How to Avoid NIN Portal Lockout under New Restrictions — NIMC

National Identity Management Commission (NIMC) has announced new restrictions for users accessing its self-service modification portal, introducing tighter security controls that may lock users out if not properly followed.
In a statement issued on Thursday, Dr Kayode Adegoke, head of the Commission’s Corporate Communications Unit, NIMC, the agency revealed that self-service accounts are now restricted to the specific browser and device originally used during account registration.
“Your self-service account is uniquely tied to the browser and device used during registration. Access to your account is therefore limited to that specific browser on that particular device,” the statement reads.
The Commission explained that the changes are part of broader efforts to enhance data protection and preserve the integrity of the National Identification Number (NIN) system.
NIMC warned users that attempting to log in with a different browser or device may trigger access issues. “Additionally, clearing a browser’s cache may reset its identity, which could also result in the user being locked out.
“If this occurs, the account will require an unlinking process to regain access,” it added.
To further tighten access control, NIMC also announced a limit on the number of unlock attempts permitted per account.
“Once your browser and device are locked, you are permitted a maximum of five unlock attempt requests. Please be advised that no further requests will be processed after this limit is exceeded,” the Commission stated.
These new rules come as part of ongoing reforms in the NIN service delivery framework, including a recent 75 per cent increase in the cost of correcting a date of birth on the NIN database, from N16,340 to N28,574.
E-Business
FG Unveils Visa Application Platform to Eliminate ID Fraud, Unauthorized Agents

Federal government has launched a groundbreaking e-visa application platform aimed at curbing identity fraud and eliminating the influence of unauthorized agents in the visa processing system.
The new platform, unveiled by the Nigerian Immigration Service (NIS), is designed to streamline visa applications, enhance security, and ensure a transparent, user-friendly process for both citizens and international visitors.
The initiative, announced on Wednesday, comes in response to growing concerns over fraudulent activities in visa applications, including document forgery and exploitation by unlicensed agents.
The platform integrates advanced identity verification technologies, leveraging the National Identity Number (NIN) and Bank Verification Number (BVN) to authenticate applicants.
This move aligns with the government’s broader efforts to strengthen Nigeria’s digital identity ecosystem and restore trust in its immigration processes.Speaking at the launch event in Abuja, Kemi Nandap, comptroller-general of the NIS, emphasized the platform’s role in modernizing Nigeria’s visa system.
“This is a significant step toward eliminating fraud and ensuring that only verified individuals can apply for visas. The days of middlemen exploiting applicants are over,” Nandap stated.
She added that the platform would provide a seamless experience, allowing applicants to submit documents, track their applications, and receive real-time updates from anywhere in the world.
The e-visa platform, accessible via the NIS website, incorporates biometric authentication and real-time data cross-referencing with the National Identity Management Commission (NIMC).
This ensures that all applicants are verified against Nigeria’s national database, significantly reducing the risk of identity theft.
Additionally, the platform eliminates the need for physical submissions at embassies or consulates, cutting down on bureaucratic delays and reducing opportunities for corrupt practices.
The launch has been met with mixed reactions. While many have praised the government’s efforts to modernize and secure the visa process, some applicants have expressed concerns about accessibility, particularly for those in rural areas with limited internet access.
The NIS has responded by announcing plans to establish support centers across the country to assist applicants with the online process.
The platform’s introduction follows reports of widespread visa fraud, with a 2023 report claiming that Nigerian visa applications were being rejected abroad due to suspicions of forged documents.
The new system aims to address these issues by centralizing and digitizing the application process, making it harder for unauthorized agents to operate.
The Federal Government has also partnered with private tech firms to ensure the platform’s cybersecurity and scalability.
According to a statement from the Ministry of Interior, the system is expected to process over 500,000 visa applications annually, boosting Nigeria’s tourism and business sectors by making the country more accessible to legitimate travelers.
e scammers,” the statement added.
E-Business
Report Reveals Over Half of Security Experts Overwhelmed Managing Cybersecurity Tools from Multiple Vendors

The majority of companies (78%) surveyed in South Africa and in the Middle East, Turkiye, and Africa (META) region, rely on multi-vendor ecosystems despite the fact that such fragmented security solutions lead to operational and financial strains. Such findings were revealed in recent Kaspersky research.
A study titled “Improving resilience: Cybersecurity through system immunity,” conducted by Kaspersky, examined how organisations manage cybersecurity today, focusing on vendor fragmentation, operational inefficiencies and future consolidation plans.
The survey was conducted across the META region, as well as in Europe, Russia, Latin America, and the Asia-Pacific region.
The report provides a comprehensive analysis of the current state of cybersecurity management across organisations, highlighting significant challenges associated with multi-vendor security environments.
The findings reveal that nearly half of security professionals (44%) surveyed in the META region find their security stacks to be overly complex and time-consuming to maintain, which hampers their ability to respond swiftly to emerging threats.
This complexity often results from the use of multiple security solutions from different vendors, each with its own management interface and operational requirements.
Furthermore, 49% of organisations surveyed in the META region experience budget overruns attributable to overlapping solutions.
These redundancies not only inflate costs but also complicate resource allocation and strategic planning. Compatibility issues exacerbate these difficulties as 43% of respondents indicate that they cannot automate security processes effectively because their tools lack proper integration, leading to manual interventions and increased chances of human error.
Additionally, 39% struggle with inconsistent threat visibility, as data collected from various vendors often fails to correlate seamlessly, creating blind spots and reducing overall situational awareness.
Despite these persistent challenges, the majority of organisations continue to operate within multi-vendor environments – 78% in the META region and in South Africa currently manage security across multiple providers.
Interestingly, 43% in META and in South Africa believe that a single cybersecurity provider could sufficiently meet all their needs, suggesting a recognition of the potential benefits of consolidation.
However, only 22% in the META region and 23% in South Africa have adopted a single-vendor approach in practice, reflecting a cautious approach driven by concerns over over-reliance on one supplier or the perceived risks associated with vendor lock-in.
The landscape is rapidly shifting toward consolidation: an overwhelming 88% of firms in the META region and 84% in South Africa are actively moving in this direction, over a third (34% in META and 39% in South Africa) have already begun merging their security tools into unified platforms, while an additional 55% in META and 45% in South Africa plan to do so within the next two years.
This trend underscores a strategic shift toward simplifying cybersecurity operations, reducing costs, and achieving more effective threat management through integrated solutions. As organisations increasingly recognise the advantages of streamlined security architectures, the move toward vendor consolidation is poised to reshape the cybersecurity landscape in the near future.
“The data from our research indicates that many organisations rely on multiple vendors by default, rather than through deliberate strategic planning. While diversification of security solutions can offer certain benefits, such as risk mitigation and coverage breadth, an unchecked increase in complexity often leads to significant resource drain and operational inefficiencies.
Moreover, this complexity can create critical blind spots, making it harder to maintain comprehensive threat visibility and respond effectively to emerging risks.
The emerging trend toward consolidation reflects a maturation in cybersecurity strategies, emphasising the adoption of integrated platforms that streamline management, reduce manual effort, and enhance overall visibility into security posture,” said Ilya Markelov, Head of Unified Platform product line at Kaspersky.
To enable comprehensive protection of all business assets and processes, Kaspersky experts recommend to use centralised and automated solutions such as Kaspersky Next XDR Expert.
By aggregating and correlating data from multiple sources in one place and using machine-learning technologies, this solution provides effective threat detection and fast automated response. Out-of-the-box integrations, automation features and case management help make infrastructure complexity much less of an issue.
- E-Financial1 day ago
Zenith Bank Slammed with ₦85m Fine for Freezing Account on Invalid Court Order
- Telecom2 days ago
Airtel Nigeria CEO Identifies Data Boom, Nationwide Connectivity as Crucial Innovation Areas
- Telecom2 days ago
NCC Tightens Rules of Corporate Governance for Telcos
- Broadcasting2 days ago
Mastercard Highlights Africa’s $16.5Bn AI Potential and Path to Digital Empowerment
- Telecom1 day ago
Telcos Say Mobile, Internet Services in Nigeria may Collapse
- News2 days ago
Olukoyede, EFCC Chair Denies Forcing Ojulari to Resign as NNPC Boss
- E-Business1 day ago
How to Avoid NIN Portal Lockout under New Restrictions — NIMC
- E-Financial2 days ago
Zenith Bank rolls out drums for D’Tigress, rewards team with N200m