E-Business
ESET Researchers Spot DoubleLocker ‘Innovative’ Android Ransomware

By peter oluka
ESET researchers have spotted the first-ever ransomware misusing Android accessibility services. On top of encrypting data, it also locks the device.
Detected by ESET products as Android/DoubleLocker.A, the ransomware is based on the foundations of a particular banking Trojan, known for misusing accessibility services of the Android operating system.
However, DoubleLocker doesn’t have the functions related to harvesting users’ banking credentials and wiping out their accounts. Instead, it has received two powerful tools for extorting money from its victims.
DoubleLocker can change the device’s PIN, preventing victims from accessing their devices, and also encrypts the data it finds in them – a combination that has not been seen previously in the Android ecosystem.
“Given its banking malware roots, DoubleLocker may well be turned into what could be called ransom-bankers. Two-stage malware that first tries to wipe your bank or PayPal account and subsequently locks your device and data to request a ransom… Speculation aside, we spotted a test version of such a ransom-banker in the wild as long ago as May, 2017,” comments Lukáš Štefanko, the ESET malware researcher who discovered DoubleLocker.
Distribution
DoubleLocker spreads in the very same way as its banking parent does. It is distributed mostly as a fake Adobe Flash Player through compromised websites.
Once launched, the app requests activation of the malware’s accessibility service, named “Google Play Service”. After the malware obtains the accessibility permissions, it uses them to activate device administrator rights and set itself as the default Home application, in both cases without the user’s consent.
“Setting itself as a default home app – a launcher – is a trick that improves the malware’s persistence. Whenever the user clicks on the home button, the ransomware gets activated and the device gets locked again. Thanks to using the accessibility service, the user doesn’t know that they launch malware by hitting Home,” explains Štefanko.
Locking Both Device And Data
DoubleLocker, once executed on the device, creates two reasons for the victims to pay.
First, it changes the device’s PIN, effectively blocking the victim from using it. The new PIN is set to a random value which the attackes neither store nor send anywhere, so it’s impossible for the user or a security expert to recover it. After the ransom is paid, the attacker can remotely reset the PIN and unlock the device.
Second, DoubleLocker encrypts all files from the device’s primary storage directory. It utilizes the AES encryption algorithm, appending the extension “.cryeye”. “The encryption is implemented properly, which means that, unfortunately, there is no way to recover the files without receiving the encryption key from the attackers,” says Štefanko.
The ransom has been set to 0.0130 BTC (approximately USD 54 at time of writing) and the message highlights that it must be paid within 24 hours. However, if the ransom is not paid, the data will remain encrypted and will not be deleted.
How To Get Rid Of It?
In the ransom note, the user is warned against removing or otherwise blocking DoubleLocker: “Without [the software], you will never be able to get your original files back”.
To prevent unwanted removal of the “software”, the crooks even recommend disabling the user’s antivirus software.
“Such advice is irrelevant: all those with a quality security solution installed on their devices are safe from DoubleLocker,” explains Štefanko.
The only viable option to clean the device of the DoubleLocker ransomware is via a factory reset.
For rooted devices, however, there is a method to get past the PIN lock without a factory reset. For the method to work, the device needed to be in the debugging mode before the ransomware got activated.
If this condition is met, then the user can connect to the device by ADB and remove the system file where the PIN is stored by Android. This operation unlocks the screen so that the user can access their device. Then, working in safe mode, the user can deactivate device administrator rights for the malware and uninstall it. In some cases, a device reboot is needed.
As for the data stored on the device, there is no way to recover it, as mentioned earlier.
“DoubleLocker serves as just another reason for mobile users to have a quality security solution installed, and to back up their data on a regular basis,” concludes Štefanko.
E-Business
Study Reveals Majority of IT Professionals Show Openness to Cyber Immunity

The cybersecurity landscape is evolving rapidly, with organisations seeking more robust ways to protect their digital assets. A recent global study conducted by Kaspersky reveals a growing shift toward proactive security strategies, particularly the adoption of Secure by Design development and Cyber Immunity – an innovative approach that embeds resilience directly into system architecture.

The study highlights that 90% of cybersecurity professionals surveyed in the Middle East, Turkiye and Africa (META) region are familiar with Secure by Design development. This methodology integrates security into the very fabric of a system from its inception, rather than treating it as an afterthought.
Such an approach is already employed in high-stakes industries like aerospace, where security cannot be bolted on later – it must be intrinsic. Despite its advantages, however, adoption has been slow due to challenges related to standardisation and cost.
Cyber Immunity is the next frontier in cybersecurity
Building on Secure by Design principles, Cyber Immunity takes cybersecurity a step further by creating systems that inherently resist attacks without the need for constant patching or additional security layers. The study reveals that most experts are familiar with Cyber Immunity but interpret it differently.
When asked what they associate with the term, 64% of respondents in the META region linked it to Secure by Design systems that remain resilient under attack, while 56% viewed it as a combination of technology and policy measures that block cybercriminal access. Another 48% connected it to highly skilled cybersecurity teams, indicating that while awareness is high, a unified understanding is still developing.
The growing demand for proactive security
One of the most striking findings is the optimism surrounding inherently secure systems. Over half of respondents in the META region (63%) believe it is already possible or definitely achievable to design systems capable of withstanding cyberattacks without relying on additional security solutions.
Another 32% think it might be possible, reflecting openness to this idea despite some uncertainty. This shift in mindset aligns with a broader industry trend: traditional reactive security measures are no longer sufficient.
With AI-powered threats and increasingly sophisticated attacks, organisations need solutions that do more than just detect breaches—they must prevent them by design.
Integrating Cyber Immunity into security strategies
The study emphasises that resilience, expertise, and flexibility will define the next generation of cybersecurity. While Secure by Design provides the methodology, Cyber Immunity represents the ultimate goal—systems so robust that they minimise reliance on external defences.
“For companies looking ahead, Cyber Immunity offers more than just protection — it brings clear business benefits. When systems are built to be secure from the ground up, there’s less need for constant updates, patches, and extra security tools. That means fewer costs, less strain on IT teams, and stronger, more reliable protection over time,” said Dmitry Lukiyan, Head of KasperskyOS Business Unit.
Most importantly in today’s threat landscape, Cyber Immunity offers robust protection against next-generation challenges — including AI-driven attacks capable of outmaneuvering traditional security measures.
When security becomes an intrinsic property of system architecture rather than an external addition, businesses gain more than just protection—they secure a competitive market advantage.
This proactive approach future-proofs critical infrastructure, enabling organisations to operate confidently even as threats evolve. It transforms cybersecurity from a defensive necessity into a strategic differentiator that accelerates digital transformation while mitigating risk.
As the cybersecurity environment becomes more complex, Cyber Immunity is emerging as a vital strategy. Organisations that adopt it now will not only enhance their protection but also position themselves ahead of the curve in an increasingly volatile digital world.
E-Business
Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga
The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.
To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.
Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.
Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”
He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”
Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.
As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.
Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.
E-Business
Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.
When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.
At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.
“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.
E-Financial2 days ago19 Nigerian Banks Meet CBN Recapitalization Targets Ahead of March Deadline
E-Financial3 days agoBVN Enrollment Up 6.87 Percent to 67.84m in 2025 – NIBSS
General News3 days agoPawnith Appoints Martina Ogbebor as Managing Director to Lead Strategic Launch into Nigeria’s Fintech Ecosystem
E-Financial2 days agoKPMG Identifies ‘Flaws, Inconsistencies, and Omission’ in New Tax Law
E-Business3 days agoStudy Reveals Majority of IT Professionals Show Openness to Cyber Immunity
News3 days agoOpenAI Launches ChatGPT Health
Telecom3 days agoNCC, CBN Unveil Refund Framework for Failed Airtime, Data Transactions
News3 days agoTrump Threatens More Strikes in Nigeria


















