E-Business
Firm Discovers New Crypto-stealing Trojan in AppStore, Google Play

Kaspersky Threat Research expertise center has discovered a new data-stealing Trojan, SparkCat, active in AppStore and Google Play since at least March 2024. This is the first known instance of optical recognition-based malware appearing in AppStore.

SparkCat uses machine learning to scan image galleries and steal screenshots containing cryptocurrency wallet recovery phrases. It can also find and extract other sensitive data in images, such as passwords. Kaspersky has reported known malicious applications to Google and Apple.
How the new malware spreads
The malware is spreading through both infected legitimate apps and lures – messengers, AI assistants, food delivery, crypto-related apps, and more. Some of these apps are available on official platforms in Google Play and AppStore.
Kaspersky telemetry data also shows that infected versions are being distributed through other unofficial sources. In Google Play, these apps have been downloaded over 242,000 times.
Who is being targeted
The malware primarily targets users in the UAE and countries in Europe and Asia. This is what experts concluded based on both the information about the operational areas of the infected apps and the technical analysis of the malware.
SparkCat scans image galleries for keywords in multiple languages, including Chinese, Japanese, Korean, English, Czech, French, Italian, Polish, and Portuguese. However, experts believe victims could be from other countries as well.
How SparkCat works
Once installed, in certain scenarios the new malware requests access to view photos in a user’s smartphone gallery. It then analyses the text in stored images using an optical character recognition (OCR) module. If the stealer detects relevant keywords, it sends the image to the attackers.
The hackers’ primary goal is to find recovery phrases for cryptocurrency wallets. With this information, they can gain full control over a victim’s wallet and steal funds. Beyond stealing recovery phrases, the malware is capable of extracting other personal information from screenshots, such as messages and passwords.
“This is the first known case of OCR-based Trojan to sneak into AppStore,” said Sergey Puzan, malware analyst at Kaspersky. “In terms of both AppStore and Google Play, at the moment it’s unclear whether applications in these stores were compromised through a supply chain attack or through various other methods. Some apps, like food delivery services, appear legitimate, while others are clearly designed as lures.”
“The SparkCat campaign has some unique features that make it dangerous. First of all, it spreads through official app stores and operates without obvious signs of infection. The stealthiness of this Trojan makes it hard to discover it for both store moderators and mobile users.
Also, the permissions it requests seem reasonable, making them easy to overlook. Access to the gallery that the malware attempts to reach may seem essential for the app to function properly, as it appears from the user perspective. This permission is typically requested in relevant contexts, such as when users contact customer support,” added Dmitry Kalinin, malware analyst at Kaspersky.
Analysing Android versions of the malware, Kaspersky experts found comments in the code written in Chinese. Additionally, the iOS version contained developer home directory names, “qiongwu” and “quiwengjing”, suggesting that the threat actors behind the campaign are fluent in Chinese. However, there is not enough evidence to attribute the campaign to a known cybercriminal group.
ML-powered attacks
Cybercriminals are increasingly paying attention to neural networks in their nefarious tools. In the case of SparkCat, the Android module decrypts and executes an OCR-plugin using the Google ML Kit library to recognise text in stored images. A similar method was used in its iOS malicious module.
E-Business
Chams Carves Out Subsidiary to Support Africa’s Digital Transformation

Chams Holding Company Plc, (Chams Holdco), digital payments and verification firm, has created a new subsidiary which is expected to strengthen the push for Africa’s digital transformation.

The creation of the new subsidiary, ChamsCorp Plc, which took effect from February 1, was made known in a filing to the Nigerian Exchange Limited , according to an announcement.
Chams said that the new subsidiary, which is its 5th, will give a new dimension to its more than 40 years of work in building the digital ecosystem not only in Nigeria, but across the continent and the rest of the world.
The newly created company will focus on three major aspects, namely the manufacturing of digital devices and development of digital infrastructure and services; data center design, construction and operations, and the development and implementation of AI infrastructure and intelligent systems.
It will also contribute to its parent company’s digital ID, digital verification, and trust services offering.
“For nearly four decades, we’ve enabled trust in transactions and identity. Now, we go furthe”
Chams is expanding into AI, data centre infrastructure, and intelligent systems, building the backbone for Africa’s digital transformation,” the company wrote in a LinkedIn post.
“We are not just participating in the future. We are engineering it,” the message added.
According to the Chams announcement, a decision of its Board of Directors appointed members of the pioneer board of ChamsCorp Plc, with renowned banker Mohammed Bashir Yunusa designated as Chairman.
He is described as a well-known finance expert who specializes in deal structuring, corporate and retail finance, business strategy, digital transformation, and Islamic Finance and Banking.
With more than 10 years of experience in the financial services industry, Yunusa currently serves as head of Consumer and Digital Banking for Non-Interest Banking Retail at Sterling Bank Nigeria, and will also serve as a non-executive director on the board.
“Chamscorp is designed to take our most ambitious ideas to market at speed and scale. As Africa’s digital economy evolves, we are focused on delivering transformative solutions that empower governments, businesses, and citizens alike,” Femi Oyenuga, CEO, Chams, commented on the development.
Chams has over the years played a major role in contributing to Nigeria’s digital ID ecosystem development to facilitate access to financial services.
In 2023, the company Group Chairman publicly stated that in providing such digital services to the Nigerian government, it had incurred debts estimated at $100 million and were planning to change their business model as a result.
E-Business
Nigeria, South Africa Drive Stablecoin Spending in Africa

Africa has emerged as the global frontrunner in stablecoin adoption, with Nigeria and South Africa leading the charge with the fastest adoption rate, as transactions surge across the continent.

This is according to the Stablecoin Utility Report, compiled by YouGov on behalf of fintech firm BVNK.
The study, conducted in partnership with Coinbase and Artemis, surveyed over 4 600 early adopters and crypto-natives in 15 countries across five continents.
It shows people are turning to stablecoins to move money more quickly, securely and affordably – and how this shift in behaviour is becoming a worldwide trend beyond its roots in the Global South.
Stablecoin adoption is accelerating particularly rapidly across Africa in 2026, driven by currency volatility, high inflation and the need for cheaper, faster cross-border payments, it finds.
The Stablecoin Utility Report shows that 79% of African respondents hold stablecoins − the highest ownership rate globally − while 76% say they intend to acquire them in the near future.
Nigeria and SA lead the continent in everyday stablecoin spending, highlighting a shift from holding digital dollars as a store of value, to actively using them for commerce.
The appetite to be paid in stablecoins is even stronger: 95% expressed interest in receiving income via dollar-pegged digital assets, whether for salaries, freelance work or cross-border services, according to the study.
Anthony Yim, co-founder and CEO of crypto research firm Artemis, explains: “We’re experiencing a significant behavioural shift in the way people are using stablecoins.
“Crypto natives and early adopters are fully on board with stablecoins, using them to pay and be paid. This is driving mainstream, global adoption – stablecoin supply has increased 500% over the past five years. Alongside the passage of multiple legislation initiatives in numerous countries, it’s clear we’re experiencing a tipping point.”
From hedge to household spending
Unlike in some developed markets where stablecoins are viewed primarily as a payments upgrade, African users are deploying them as practical financial tools. Key use cases include hedging against inflation, facilitating remittances and funding day-to-day purchases.
The report finds that 92% of African respondents say the condition of their national economy directly affects their stablecoin usage − a reflection of currency volatility, capital controls and high remittance costs across several markets.
Africa also recorded the highest likelihood globally (89%) of users adopting stablecoin-linked debit cards, signalling demand for tighter integration between digital assets and traditional payments.
Infrastructure, not ideology
Taken together, the findings reinforce a broader thesis: stablecoins are evolving beyond a payment method into payments infrastructure, states the report.
For individuals, this means receiving income faster and at lower cost. For businesses, it enables borderless treasury operations and supplier payments. For financial platforms, it opens opportunities to embed stablecoin wallets, debit cards and cross-border settlement into core offerings.
This demand for institutional-grade integration is evident globally, with 77% of survey respondents saying they would open a stablecoin wallet if offered by their primary bank or fintech provider.
As adoption deepens in Africa and regulatory frameworks mature in developed markets, the data suggests stablecoins are no longer a niche crypto product − but a structural layer in the future of global money movement, notes BVNK.
E-Business
Kaspersky Reports 15% Growth in Malicious email Attacks in 2025

According to Kaspersky telemetry, almost every second email – 44.99% of global traffic – was spam in 2025. Spam consists not only of unsolicited emails, but can also include various email threats such as scam, phishing and malware.

In 2025, individuals and corporate users encountered over 144 million malicious and potentially unwanted email attachments, representing a 15% increase compared to the previous year figures.
In 2025, APAC had the largest share of email antivirus detections: it reached 30%, followed by Europe with 21%. Next came Latin America (16%) and the Middle East (15%), Russia and CIS (12%) and Africa (6%). As for individual countries, China had the highest rate of malicious and potentially unwanted email attachments, with the share of email antivirus detections of 14%. Russia ranked second (11%), followed by Mexico (8%), Spain (8%) and Turkey (5%).
Email antivirus detections peaked moderately in June, July and November.
Key trends in email spam and phishing
Kaspersky’s annual analysis has also identified several persistent trends in the email spam and phishing threat landscape that are expected to continue into 2026:
- Combination of various communication channels. Attackers lure email users into switching to messengers or calling fraudulent phone numbers. For instance, scam investment mailings may redirect victims to fake websites, where they are asked to provide their contact information, and then cybercriminals will follow up with a phone call.
- Usage of diverse evasion techniques in phishing and malicious emails. Threat actors frequently try to disguise phishing URLs, for example, with the help of link protection services and QR codes. These QR codes are often embedded directly in email bodies or within PDF attachments, which not only conceals phishing links but also encourages users to scan them on mobile devices, potentially exploiting weaker security measures than corporate PCs.
- Mailings exploiting diverse legitimate platforms. For example, Kaspersky experts discovered a fraudulent tactic that abuses OpenAI’s organisation creation and team invitation features to send spam emails from legitimate OpenAI addresses, potentially tricking users into clicking scam links or dialing fraudulent phone numbers. Additionally, a calendar-based phishing scheme, which originated in the late 2010s, resurfaced last year with a focus on corporate users.
- Refining tactics in business email compromise (BEC) attacks. In 2025 attackers attempted to become even more persuasive by incorporating fake forwarded emails into their correspondence. These emails lacked thread-index headers or other headers, making it difficult to verify their legitimacy within an email conversation.
“Email phishing shouldn’t be underestimated. Our report reveals that one in ten business attacks starts with phishing, with a significant proportion being Advanced Persistent Threats (APTs). In 2025, we saw an increase in the sophistication of targeted email attacks. Even the smallest details are meticulously crafted in these malicious campaigns, including the composition of sender addresses and the tailoring of content to real corporate events and processes.
“The commodification of generative AI has significantly amplified this threat, enabling attackers to craft convincing, personalised phishing messages at scale with minimal effort, automatically adapting tone, language and context to specific targets,” comments Roman Dedenok, anti-spam expert at Kaspersky.
News2 days agoAfrican Leaders Highlight Africa’s AI Ambitions
General News3 days agoUBA Unveils Diaspora Platform to Connect Global Africans with Investment, Wealth Opportunities
General News2 days agoNDPC Orders Probe into Temu over Alleged Data Privacy Breaches
Telecom2 days agoMTN, BUA, Dangote & Other Industry Giants Triumph at NGX Made of Africa Awards
Telecom2 days agoX Suffers Global Outage, Millions Barred from Access
Telecom2 days agoMTN CIO Urges Africa to Lead Fourth Digital Revolution
General News2 days agoLeo Stan Ekeh Foundation, Zinox Group To Invest 10B on 1000 University Tech Scholarships for Indigent Nigeria Wiz-kids
News2 days agoLG Nigeria Begins Nationwide Search for Oldest Working TV, Rewards Loyalty with AI QNED Upgrade
















