General News
Sophos Discovers Fake Apps Found on Apple’s App Store Used by Cybercriminals for CryptoRom Schemes
Sophos, a global leader in innovating and delivering cybersecurity as a service, on Wednesday released new findings on CryptoRom scams—elaborate financial fraud schemes that prey on and trick dating app users into making fake cryptocurrency investments—in its latest report, “Fraudulent Trading Apps Sneak into Apple and Google App Stores.”
The report details the first fake CryptoRom apps —Ace Pro and MBM_BitScan— to successfully bypass Apple’s strict security protocols.
Previously, cybercriminals used workaround techniques to convince victims to download illegitimate iPhone apps that were not sanctioned by the Apple App Store.
Sophos immediately notified Apple and Google; both have since removed the fraudulent apps from their respective stores.
“In general, it’s hard to get malware past the security review process in the Apple App Store. That’s why, when we originally began investigating CryptoRom scams targeting iOS users, the scammers would have to persuade users to first install a configuration profile before they could install the fake trading app.
“This obviously involves an additional level of social engineering—a level that’s hard to surmount. Many potential victims would be ‘alerted’ that something wasn’t right when they couldn’t directly download a supposedly legitimate app.
“By getting an application onto the App Store, the scammers have vastly increased their potential victim pool, particularly since most users inherently trust Apple,” said Jagadeesh Chandraiah, senior threat researcher, Sophos.
“Both apps are also not affected by iOS’ new Lockdown mode, which prevents scammers from loading mobile profiles helpful for social engineering. In fact, these CryptoRom scammers may be shifting their tactics—i.e., focusing on bypassing the App Store review process—in light of the security features in Lockdown.”
To lure the victim who was conned with Ace Pro, for instance, the scammers created and actively maintained a fake Facebook profile and persona of a woman supposedly living a lavish lifestyle in London.
After building a rapport with the victim, the scammers suggested the victim download the fraudulent Ace Pro app and the cryptocurrency fraud unfolded from there.
Ace Pro is described in the app store as a QR code scanner but is a fraudulent crypto trading platform. Once opened, users see a trading interface where they can supposedly deposit and withdraw currency. However, any money deposited goes directly to the scammers.
In order to get past App Store security, Sophos believes the scammers had the app connect to a remote website with benign functionality when it was originally submitted for review.
The domain included code for QR scanning to make it look legitimate to app reviewers. However, once the app was approved, the scammers redirected the app to an Asian-registered domain. This domain sends a request that responds with content from another host that ultimately delivers the fake trading interface.
MBM_BitScan is also an app for Android, but it is known as BitScan on Google Play. The two apps communicate with the same Command and Control (C2) infrastructure; this C2 infrastructure then communicates with a server that resembles a legitimate Japanese crypto firm. Everything else that is malicious is handled in a web interface, which is why it is hard for Google Play’s code reviewers to detect it as fraudulent.
CryptoRom, a subset of family of scams known as sha zhu pan literally “pig butchering plate”—is a well-organized, syndicated scam operation that uses a combination of romance-centered social engineering and fraudulent crypto trading applications and websites to lure victims and steal their money after gaining their confidence.
Sophos has been tracking and reporting on these scams that reap millions of dollars for two years.
Learn more about the criminals behind the CryptoRom rings and these fraudulent apps in “Fraudulent CryptoRom Trading Apps Sneak into Apple and Google App Stores” on Sophos.com.
Independent Corrupt Practices and Other Related Offences Commission (ICPC) indicted the National Information Technology Development Agency (NITDA) and other ministries over administrative lapses that allowed the fictitious Presidential Foreign Investment Promotion Council (PFIPC) to operate.
Musa Aliyu, chairman, ICPC, stated that NITDA, alongside the Office of the Secretary to the Government of the Federation (OSGF), the Budget Office, and other bodies, failed to carry out adequate due diligence and standard operating procedures.
ICPC said however, clarified that the findings pointed to severe internal control weaknesses and administrative negligence rather than active official complicity by NITDA and the other affected agencies.
The briefing followed a 30-day investigation ordered by the president on July 7 into allegations surrounding the purported presidential council.
The commission also cleared the presidency and the Central Bank of Nigeria (CBN) of any wrongdoing but blamed institutional lapses in several ministries, departments and agencies (MDAs).
Aliyu said investigators established that Adeniyi Adeyemi, the director-general, was never appointed by the federal government and that the PFIPC had no legal existence.
“As you may recall, on the 7th of July, Mr. President directed the ICPC to conduct an investigation into the fake Presidential Foreign Investment Promotion Council and submit a report within 30 days,” he said.
“Today, exactly within the stipulated period, we have submitted an interim report based on our interactions with all stakeholders involved.”
According to Aliyu, Tinubu directed the commission to make its findings public in the interest of transparency and accountability.
He said the investigation found that Adeyemi’s purported appointment letter was forged.
“It has been established that Adeniyi Adeyemi Matthew was never appointed by the Federal Government or any authority whatsoever,” he said.
“The Presidential Foreign Investment Promotion Council, which sometimes they called the Presidential Foreign Intervention Promotion Council, was never established by any law, executive order or any valid instrument of government.
“The appointment letter presented by Adeniyi Adeyemi Matthew was completely forged alongside similar documents used to perpetuate the illegal activities of the fake agency.”
Aliyu stated that a purported government gazette used to legitimise the organisation was also fabricated.
“If you recall, there was a gazette which he used to support the fake agency. That gazette is an illegal document that never passed through the processes prescribed by law,” he stated.
“Our investigation found that the office used by the fake agency was the office of the Presidential Economic Advisory Council. The office was broken into and access was gained illegally. That was how he was able to operate from there.”
Aliyu also revealed that investigators uncovered two additional fictitious government agencies allegedly created by the suspect — the FCT Investment Promotion Agency (FIPA) and the Foreign Investment Promotion Agency/Public-Private Partnership (FIPA-PPP).
According to him, fake legislative instruments were used to create the agencies and open bank accounts.
Despite the elaborate scheme, the ICPC chairman said the investigation found no evidence that federal government funds were disbursed to the fake council.
“Our investigation found that no funds of the federal government were approved or disbursed to the fake PFIPC,” he said.
“We also discovered no weaknesses in the systems of the State House or the Central Bank of Nigeria during our investigation. The fake appointment letter did not originate from the presidency.
“Our investigation found that some public officers failed to carry out due diligence and failed to comply with standard operating procedures in their ministries and departments. That gave him the opportunity to carry out these illegal acts.”
Nigeria tax system is build on taxing prosperity not poverty, according to Dr. Zacch Adedeji, executive chairman, Nigeria Revenue Service (NRS).
Dr. Zacch Adedeji, executive chairman, Nigeria Revenue Service
Adedeji, also dismissed the insinuation that the government’s tax reform is aimed at extracting money from Nigerians .
He said the essence of reform is creating an economic environment where individuals and businesses can prosper.
Dr. Adedeji made the clarifications on Sunday night while appearing on Channels Television’s Politics Today, where he defended the administration’s tax reforms and addressed concerns over rising government revenue amid the economic hardship facing Nigerians.
According to him, the government’s objective is to tax the fruits of investment rather than the investment itself.
“For us at Nigeria Tax, we are not there to extract. Our focus is not revenue. I don’t want to tax poverty. I’m to tax the fruit, not the seed, and I’m to tax the return, not investment.”
Adedeji explained that the government would generate more revenue as businesses became more profitable, without necessarily increasing the tax burden on individuals and companies.
He said a company that made N100 in profit could generate N30 in tax revenue for the government, but if its profit increased to N200 or N300, government revenue would rise accordingly.
“So, if I want to make more, I must work for you to make more. And that is why it is in the best interest of us in Nigeria Revenue Service that businesses are doing well, individuals are doing well,” he said.
He said the approach was consistent with President Bola Tinubu’s economic agenda, which seeks to remove barriers to investment and create a more conducive environment for businesses to operate and expand.
Adedeji cited reforms in the electricity sector as part of the government’s efforts to stimulate economic activity.
He noted that the Electricity Act had devolved powers to state governments to generate, transmit and distribute electricity, arguing that improved power supply would boost production and productivity across the economy.
Prof Chidi Oguamanam, Nigerian scholar, has been invited to serve as a member of the United Nations Educational, Scientific and Cultural Organization (UNESCO’s) World Commission on the Ethics of Scientific Knowledge and Technology.
Prof Chidi Oguamanam,
The appointment, which covers four years from 2026 to 2029, recognises Oguamanam’s contributions to the ethics of science and technology and related disciplines.
The invitation was conveyed in a letter from UNESCO on Saturday, which described the commission as an independent advisory body and forum for reflection on major ethical challenges arising from advances in science and technology.
The letter stated, “Recognising your significant contributions to the ethics of science and technology and related disciplines, it is my honour to invite you to become a member of UNESCO’s World Commission on the Ethics of Scientific Knowledge and Technology for a period of four years, from 2026 to 2029.”
Established in 1998, the commission brings together experts from different regions and disciplines to examine ethical issues associated with scientific and technological developments, climate change and the environment.
UNESCO said regional balance was important to the commission’s membership to promote multidisciplinary and transdisciplinary debate on emerging ethical challenges.
According to the organisation, the commission provides guidance and recommendations through its reports to UNESCO, its member states, the scientific community, policymakers, civil society and other stakeholders.
Its previous work has contributed to global normative instruments, including the Declaration of Ethical Principles in Relation to Climate Change adopted in 2017 and the Recommendation on the Ethics of Artificial Intelligence adopted in 2021.
UNESCO noted that the commission had recently published reports examining the ethics of quantum computing and space exploration and utilisation.
The organisation said the commission would now focus on new areas identified for its future work programme, including emerging ethical challenges arising from scientific and technological developments.
In inviting Oguamanam to join the commission, UNESCO expressed confidence in his expertise and active contribution to the development of its forthcoming reports.
The organisation also said it expected members to contribute to “horizon scanning” of emerging ethical challenges and help identify issues that should be addressed in the commission’s next cycle.
Oguamanam’s appointment adds to Nigeria’s representation in international discussions on the ethical implications of science, technology and innovation.
He is expected to serve on the commission alongside experts from different regions and academic disciplines during the 2026–2029 term.
Fake Agency: ICPC Indicts NITDA, Others over Inadequate Due Diligence
Tax Reform Built on Taxing Prosperity, Not Poverty– Adedeji
UNESCO Taps Oguamanam,Nigerian Scholar to Advisory Body on Science, Tech Ethics
MTN Alerts Subscribers over Fake 25GB Anniversary MTN Data Giveaway
X Replaces Revenue Sharing wit New Creator Rewards Programme
EFCC Busts NIS Visa Overstay Racket, Uncovers N700m in an Account
Fact-Check: Elon Musk’s “Tesla Pi Phone” is Internet Rumor
NBC Tasks Broadcasting Stations over 2028 DSO Global Deadline
Police Busts Syndicate Who Allegedly Stole N3Bn from Financial Institution
NBC Scraps Annual Digital Access Fee on DSO
General News2 days agoGuinness Rewards Consumers with ₦17 Million in First Week of ‘Open for More’ Promo Draw
News2 days agoGlovo Pioneers AI Quick-Commerce
News2 days agoWorld Bank Debars United Aviation Services, Owner over Fraudulent Activities
E-Business2 days agoNITDA Introduces Cloud Certification Boost Data Localisation Compliance
Telecom2 days agoNCC, Enugu Sign Deal to Operate Digital Industrial Park, Learning Centre
E-Financial2 days agoBOI Opens N250Bn Bond Offer to Fund Businesses
News2 days agoEnugu State Approves Land for ITF’s Digital Fabrication Centre
General News2 days agoMeta Hit With $567m US Court Order Over Alleged Harm to Children