Connect with us

E-Business

Firm Discovers New Crypto-stealing Trojan in AppStore, Google Play

Published

on

Kindly share this post

Kaspersky Threat Research expertise center has discovered a new data-stealing Trojan, SparkCat, active in AppStore and Google Play since at least March 2024. This is the first known instance of optical recognition-based malware appearing in AppStore.

SparkCat uses machine learning to scan image galleries and steal screenshots containing cryptocurrency wallet recovery phrases. It can also find and extract other sensitive data in images, such as passwords. Kaspersky has reported known malicious applications to Google and Apple.

How the new malware spreads

The malware is spreading through both infected legitimate apps and lures – messengers, AI assistants, food delivery, crypto-related apps, and more. Some of these apps are available on official platforms in Google Play and AppStore.

Kaspersky telemetry data also shows that infected versions are being distributed through other unofficial sources. In Google Play, these apps have been downloaded over 242,000 times.

Who is being targeted

The malware primarily targets users in the UAE and countries in Europe and Asia. This is what experts concluded based on both the information about the operational areas of the infected apps and the technical analysis of the malware.

SparkCat scans image galleries for keywords in multiple languages, including Chinese, Japanese, Korean, English, Czech, French, Italian, Polish, and Portuguese. However, experts believe victims could be from other countries as well.

How SparkCat works

Once installed, in certain scenarios the new malware requests access to view photos in a user’s smartphone gallery. It then analyses the text in stored images using an optical character recognition (OCR) module. If the stealer detects relevant keywords, it sends the image to the attackers.

The hackers’ primary goal is to find recovery phrases for cryptocurrency wallets. With this information, they can gain full control over a victim’s wallet and steal funds. Beyond stealing recovery phrases, the malware is capable of extracting other personal information from screenshots, such as messages and passwords.

“This is the first known case of OCR-based Trojan to sneak into AppStore,” said Sergey Puzan, malware analyst at Kaspersky. “In terms of both AppStore and Google Play, at the moment it’s unclear whether applications in these stores were compromised through a supply chain attack or through various other methods. Some apps, like food delivery services, appear legitimate, while others are clearly designed as lures.”

“The SparkCat campaign has some unique features that make it dangerous. First of all, it spreads through official app stores and operates without obvious signs of infection. The stealthiness of this Trojan makes it hard to discover it for both store moderators and mobile users.

Also, the permissions it requests seem reasonable, making them easy to overlook. Access to the gallery that the malware attempts to reach may seem essential for the app to function properly, as it appears from the user perspective. This permission is typically requested in relevant contexts, such as when users contact customer support,” added Dmitry Kalinin, malware analyst at Kaspersky.

Analysing Android versions of the malware, Kaspersky experts found comments in the code written in Chinese. Additionally, the iOS version contained developer home directory names, “qiongwu” and “quiwengjing”, suggesting that the threat actors behind the campaign are fluent in Chinese. However, there is not enough evidence to attribute the campaign to a known cybercriminal group.

ML-powered attacks

Cybercriminals are increasingly paying attention to neural networks in their nefarious tools. In the case of SparkCat, the Android module decrypts and executes an OCR-plugin using the Google ML Kit library to recognise text in stored images. A similar method was used in its iOS malicious module.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Kaspersky Warns that Scammers are Exploiting World Cup 2026 Travellers

Published

on

Kindly share this post

Kaspersky experts explain which online offers travellers should be cautious of when planning their trip, to avoid spoiling their experience ahead of the upcoming games.

Thousands of fans are expected to attend the World Cup 2026, and many are already handling their travel logistics, purchasing their flights and other transport tickets, booking accommodation, and arranging everything they need to reach the host cities. As interest grows, so does the number of fraudulent schemes that exploit the fact that fans are actively preparing for their upcoming journey.

In late April 2026, Kaspersky experts detected a campaign exploiting the branding of a well-known transport app, targeting users in Mexico. The interface of a fake Spanish-language website, impersonating one of the services, prompts users to enter their phone number and password in order to “claim prizes.” In reality, the attackers are mimicking a trusted brand and attempting to steal users’ credentials from those lured by the promise of a reward.

Some cybercriminals go “a level lower” and post their offers on the dark web. Kaspersky Digital Footprint Intelligence experts discovered a thread advertising such services, published on a shadow forum in March 2026.

The listings included offers for discounted airline tickets, hotel bookings, and match tickets, allegedly at 20% off the original price. These offers are designed to lure users and can be highly dangerous, ultimately resulting in victims losing both their money and any services they expected to receive.

Entrepreneurs and property owners also in the crosshairs

Cybercriminals are also targeting businesses and entrepreneurs at the intersection of the travel industry, which is also involved in the event. Given the high demand for short-term rentals during the tournament, property owners have become an attractive target for scams.

For example, a fake website was discovered requesting account credentials for a well-known platform. In this way, scammers attempt to gain access to property owner accounts, potentially resulting in unauthorised withdrawals and financial losses.

Another common scheme involves fraudsters attempting to extract money from organisations by posing as representatives of well-known airlines and offering fictitious business partnerships. In these emails, they claim to be launching new projects or business expansion initiatives and state that they are actively seeking suppliers or contractors.

If a company representative responds to such an offer, the scammers typically escalate the deception in a subsequent stage. To enhance credibility, they send forged documents for completion and signature, including supplier registration forms and non-disclosure agreements.

The ultimate objective of the fraudsters in this scheme is to induce the organisation to pay a so-called “deposit,” ostensibly required to secure a priority position in a partner selection list.

According to the claims made in the fraudulent communications, this payment would later be fully refunded once the partnership is formally established. In reality, this promise is entirely deceptive. The perpetrators simply appropriate the funds, and no reimbursement is ever made to the victim organisation.

“The travel sector, particularly when it intersects with major events, is a persistent target for a wide range of scams and fraudulent schemes. For end users, it is often difficult to distinguish at first sight between a legitimate website and a spoofed one, or between genuine marketing communications from a reputable service and scam emails.

“We therefore advise treating overly attractive offers with a high degree of caution in order to protect your personal data and financial resources,” says Anna Lazaricheva, senior spam analyst at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Meta Platforms Contributed $820m to Nigeria’s Economy in 2025 – Report

Published

on

Kindly share this post

Meta’s family of platforms, including Facebook, Instagram and WhatsApp, contributed an estimated 820 million dollars in annual economic value to Nigeria in 2025, according to a new report released on Wednesday.

Meta platforms contributed $820m to Nigeria’s economy in 2025 - Report

Meta

The report titled “Nigeria’s Digital Economy” was conducted by independent research firm, Public First, and commissioned by Meta.

It stated that 14 million Nigerian small and medium-scale enterprises (SMEs) used Meta platforms in 2025 to start, run and grow their businesses.

According to the report, the platforms contributed about two billion dollars to Nigeria’s Gross Domestic Product (GDP) while generating an estimated 640 million dollars in productivity gains through instant messaging services.

The report noted that 81 per cent of Nigerian businesses surveyed said Meta platforms had helped them expand their customer base beyond their local areas.

It added that the digital tools had reduced customer acquisition costs and enabled businesses in different parts of the country to access wider markets.

The report also highlighted the growing role of artificial intelligence (AI) in Nigeria’s economy, projecting that AI could contribute 22 billion dollars to the country’s GDP by 2035 under favourable conditions.

It stated that 87 per cent of online Nigerians surveyed believed AI products developed within Africa would play an important role in the continent’s economic growth.

Speaking on the findings, Meta’s Director of Public Policy for Sub-Saharan Africa, Balkissa Ide Siddo, described Nigeria as one of the world’s most entrepreneurial and digitally engaged markets.

According to her, Meta platforms are helping to remove traditional barriers to business growth and enabling entrepreneurs to access broader economic opportunities.

“From a tailor in Lagos reaching customers across the country through Instagram, to a small business owner in Kano taking orders on WhatsApp, to a creator in Abuja building a global audience on Facebook, Meta’s platforms are unlocking real economic opportunity,” she said.

Siddo noted that WhatsApp had become a major gateway for AI adoption in Nigeria and across Sub-Saharan Africa.

She added that 93 per cent of Meta AI prompts in the region were made through WhatsApp, indicating that many users were engaging with AI technologies through platforms they already use daily.

The report further stated that 93 per cent of online Nigerian adults surveyed said they felt more connected to wider communities through Meta’s applications.

Also speaking, Alison Neyle, Director at Public First, said the findings reflected the increasing role of digital platforms in supporting entrepreneurship and participation in Nigeria’s growing digital economy.

“Nigeria’s digital transformation is creating new opportunities for businesses, creators and consumers alike.

“With the right combination of infrastructure, platform access and open-source AI, the upside for Nigeria is significant,” Neyle said.

The report projected that Meta’s contribution to Nigeria’s economy could rise to two billion dollars annually as digital adoption deepens and internet access improves across the country.


Kindly share this post
Continue Reading

E-Business

NITDA Unveils AI-Powered Government System That Tracks Workers, Flags Delays Automatically @ICSC 2026

Published

on

Kindly share this post

Kashifu Inuwa, director general of the National Information Technology Development Agency, has called on public institutions and organisations to embrace Artificial Intelligence (AI) responsibly while prioritising human accountability, policy frameworks, and digital skills development.

NITDA Unveils AI-Powered Government System That Tracks Workers, Flags Delays Automatically @ICSC 2026

Rep of DG NITDA, the Director, SMP Department, Dr Aristotle Onumo giving insights into effective public service delivery through digital transformation at the ICSC 2026

Speaking at the International Civil Service Conference 2026, held at the Eagles Square in Abuja, the NITDA boss who was represented by the Director, Stakeholder Management and Partnership department, Dr Aristotle Onumo, disclosed that the Agency has already begun implementing a comprehensive AI Transformation Plan designed to reposition the organisation for long-term institutional efficiency, continuity, and productivity.

According to him, the three-year transformation initiative is aimed at creating a digitally driven institution where operations can continue seamlessly regardless of personnel changes.

“In NITDA as an agency, we have what we call the AI Transformation Plan. It is a kind of three-year plan which we have put in place so that even if the current staff are replaced completely, new personnel should be able to interact with the system and continue work without hindrance,” he stated.

The DG explained that the Agency has already integrated AI into its internal workflow processes, particularly in document management and task tracking.

He noted that official documents submitted at the Agency’s premises are now scanned immediately at the gate and automatically routed by AI systems to the responsible officers based on identified keywords and subject areas.

He added that the AI infrastructure also monitors timelines and flags delays where officers fail to attend to official correspondence within stipulated periods.

“All that is required now is to drop documents at the gate. AI scans and routes them to the appropriate officers. If such documents are not treated within the required timeframe, the system flags them and reports accordingly,” he explained.

While acknowledging concerns surrounding AI adoption, particularly fears about job displacement, the NITDA DG stressed that the technology should be viewed as a tool for improving productivity rather than a threat to human relevance.

“There is always this fear that AI is coming to take away jobs, especially in the public service. But I want to state clearly that the jobs of people who refuse to upskill themselves may eventually be affected. However, those willing to retrain and adapt will benefit immensely from AI,” he said.

To address workforce transition concerns, he revealed that NITDA has commenced agency-wide AI capacity building programmes for all staff members.

According to him, employees whose traditional roles are being transformed by automation are being reassigned and redesignated into emerging AI-related functions.

“We have ensured that everyone undergoes AI training. Those who previously handled manual file operations have now been redesignated as AI assistants and AI administrators. We are preparing our workforce for the future rather than replacing them,” he noted.

The DG further emphasised the importance of maintaining human oversight in AI deployment, warning against the complete removal of human intelligence and accountability from governance systems.

“You must not take away human monitoring and accountability in any AI implementation process. At the end of the day, someone must remain accountable,” he cautioned.

Speaking on governance and regulation, the NITDA boss called for all Ministries, Departments and Agencies (MDAs) to develop internal AI policies capable of defining clear operational boundaries for the technology.

According to him, government deployment of AI differs significantly from private sector usage because public institutions must bear responsibility for any AI-related failures or ethical breaches.

He stressed the need for robust governance frameworks to guide responsible AI use, protect citizens’ rights, and ensure compliance with data protection regulations.

“We must ensure that whatever we use AI for aligns with data protection regulations and responsible use principles. Without proper frameworks, data misuse could become more prevalent and destructive,” he warned.

The NITDA DG also highlighted the Agency’s broader efforts to drive national AI adoption following the development of Nigeria’s National AI Strategy, which he described as one of the country’s most forward-looking digital policy documents.

He stated that NITDA is currently using the Agency as a practical AI sandbox to test implementation models before wider deployment across the public service ecosystem.

As part of efforts to deepen digital capacity across government institutions, he disclosed that NITDA is collaborating with the Office of the Head of Civil Service of the Federation to train civil servants in digital literacy and AI-related competencies.

He reiterated that the future workforce must embrace continuous learning and adaptability to remain relevant in an increasingly AI-driven world.

“AI has not come to replace people completely. But those who refuse to develop their skills may struggle to fit into the evolving technology ecosystem,” he concluded.


Kindly share this post
Continue Reading

Trending