Connect with us

Uncategorized

Sophos Discovers Fake Apps Found on Apple’s App Store Used by Cybercriminals for CryptoRom Schemes

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, on Wednesday released new findings on CryptoRom scams—elaborate financial fraud schemes that prey on and trick dating app users into making fake cryptocurrency investments—in its latest report, “Fraudulent Trading Apps Sneak into Apple and Google App Stores.”

The report details the first fake CryptoRom apps —Ace Pro and MBM_BitScan— to successfully bypass Apple’s strict security protocols.

Previously, cybercriminals used workaround techniques to convince victims to download illegitimate iPhone apps that were not sanctioned by the Apple App Store.

Sophos immediately notified Apple and Google; both have since removed the fraudulent apps from their respective stores.

“In general, it’s hard to get malware past the security review process in the Apple App Store. That’s why, when we originally began investigating CryptoRom scams targeting iOS users, the scammers would have to persuade users to first install a configuration profile before they could install the fake trading app.

“This obviously involves an additional level of social engineering—a level that’s hard to surmount. Many potential victims would be ‘alerted’ that something wasn’t right when they couldn’t directly download a supposedly legitimate app.

“By getting an application onto the App Store, the scammers have vastly increased their potential victim pool, particularly since most users inherently trust Apple,” said Jagadeesh Chandraiah, senior threat researcher, Sophos.

“Both apps are also not affected by iOS’ new Lockdown mode, which prevents scammers from loading mobile profiles helpful for social engineering. In fact, these CryptoRom scammers may be shifting their tactics—i.e., focusing on bypassing the App Store review process—in light of the security features in Lockdown.”

To lure the victim who was conned with Ace Pro, for instance, the scammers created and actively maintained a fake Facebook profile and persona of a woman supposedly living a lavish lifestyle in London.

After building a rapport with the victim, the scammers suggested the victim download the fraudulent Ace Pro app and the cryptocurrency fraud unfolded from there.

Ace Pro is described in the app store as a QR code scanner but is a fraudulent crypto trading platform. Once opened, users see a trading interface where they can supposedly deposit and withdraw currency. However, any money deposited goes directly to the scammers.

In order to get past App Store security, Sophos believes the scammers had the app connect to a remote website with benign functionality when it was originally submitted for review.

The domain included code for QR scanning to make it look legitimate to app reviewers. However, once the app was approved, the scammers redirected the app to an Asian-registered domain. This domain sends a request that responds with content from another host that ultimately delivers the fake trading interface.

MBM_BitScan is also an app for Android, but it is known as BitScan on Google Play. The two apps communicate with the same Command and Control (C2) infrastructure; this C2 infrastructure then communicates with a server that resembles a legitimate Japanese crypto firm. Everything else that is malicious is handled in a web interface, which is why it is hard for Google Play’s code reviewers to detect it as fraudulent.

CryptoRom, a subset of family of scams known as sha zhu pan literally “pig butchering plate”—is a well-organized, syndicated scam operation that uses a combination of romance-centered social engineering and fraudulent crypto trading applications and websites to lure victims and steal their money after gaining their confidence.

Sophos has been tracking and reporting on these scams that reap millions of dollars for two years.

Learn more about the criminals behind the CryptoRom rings and these fraudulent apps in “Fraudulent CryptoRom Trading Apps Sneak into Apple and Google App Stores” on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Uncategorized

Sterling One Foundation Partners UNIDO, Others to Launch ESG Series

Published

on

Kindly share this post

The Sterling One Foundation, a non-profit organization dedicated to sustainable development and empowering professionals to drive social impact across Africa, has partnered with Price Waterhouse Coopers Nigeria, UNIDO-Investment Technology Promotion Office, Nigeria, Lagos Business School Sustainability Center, Sterling Bank, NGX Group, the Nigeria Employers Consultative Association and the Lagos Chamber of Commerce & Industry to unveil  the first edition of its Environmental, Social, and Governance (ESG) Series.

The partnership aims to support professionals in understanding, implementing, and reporting sustainability progress, in alignment with global standards.

According to a signed statement by the Foundation, the ESG Series was birthed following a workshop held at the 2023 edition of the Africa Social Impact Summit (ASIS) where it was discovered that there was a significant knowledge gap on the subject within the African development ecosystem as well as the private sector.

They commended all the excellent partners who have made the series possible noting that their commitment will strengthen professionals’ competencies in integrating ESG principles into organizational frameworks, and drive positive change while advancing the adoption of ESG principles and increased investment into the economy from local and global investors.

Over the years, Environmental, Social, and Governance (ESG) considerations have evolved from optional to essential for organizations, making the significance of incorporating ESG principles into business plans to enhance sustainability and corporate responsibility, for organizations an increased priority. Statistics indicate that ESG-focused institutional investments are projected to reach $33.9 trillion by 2026.

Through this series, the Foundation said it aims to demystify ESG concepts among the private, public, and development sectors in Nigeria and Africa while highlighting their tangible business benefits, to equip professionals with the knowledge and tools necessary for successful ESG integration in their organizations.

The one-day virtual event gives insight through in-depth sessions featuring thought leaders from private sector impact makers, development partners, international non-governmental organizations, and government agencies.


Kindly share this post
Continue Reading

Uncategorized

Uche Ikejimba Secures Sixth Consecutive AMVCA Nomination With Best Unscripted M-Net Original Nod

Published

on

Kindly share this post

Uche Ikejimba, Award-winning producer, has secured her sixth consecutive Africa Magic Viewers Choice Award nod. The organizers made the nomination announcements on Sunday, March 24, 2024, across all Africa Magic channels. It saw Ikejimba clinch a nom in the ‘Best Unscripted M-Net Original’ category for What Will People Say.

In 2022, Ikejimba received two nominations for ‘Best Africa Magic Original Drama Series’ for Unmarried and Dilemma. She secured two other nominations in 2023 in ‘Best Unscripted Original’ for Come Play Naija and ‘Best Original Drama Series’ category for Unmarried.

Speaking about her latest nomination, Ikejimba said, “I’m very humbled and beyond grateful to be receiving my sixth consecutive AMVCA nomination. Anyone who knows me will acknowledge that I often put my blood, sweat and tears into the shows I produce. After Truth won its nomination in 2020, I’ve been holding on patiently for a second win and I hope this is the year. So, here’s my hearty congratulations to my fellow nominees and a huge thank you to the AMVCAs organisers for honoring me.”

Ikejimba is one of Africa’s most-sought after serial producers, and has earned herself the title, ‘Reality TV Series Savant’, with work on 100% Naija, Vodafone Icons, Naija Sings, Calabar Festival Diaries, Big Brother Reunion, Shoot Your Shot, What Will People Say, Come Play Naija, and the more recently airing Husband Material and Overall Best.

She came into the world of Television production as an associate producer on Moments with Mo, the first and only syndicated daily talk show in Africa at the time. However, she has also proven that her talents go beyond producing reality shows or unscripted serials, and she can run with the best in producing original drama series.

In 2016, she landed her first commissioned project with Africa Magic titled Hustle. The series about a young man’s first time in Lagos became an instant hit and ran for three seasons, with 360 episodes. She created, wrote and produced Blink’s original 26-episode drama series titled Truth. The show won an AMVCA for ‘Best TV Series’ in 2020. That same year, she produced and wrote the hit series, Unmarried. The show ran for four seasons and ended on a high.

Off the success of these drama series, she produced Africa Magic’s Dilemma, a 260-episode telenovela. She produced Shallow and the recent Africa Magic fanfavourite original, Manfriend. The show follows the women of the King family and their dysfunctional relationship with the men in their lives. She also produced Showmax’s first original law limited series, AGU in 2023. Her first feature length film, Phantom is a co-production and is also nominated for several awards such as the Toronto International Nollywood Film Festival (TINFF).

Uche Ikejimba has beaten many odds to become a producer and remained steadfast in her commitment to producing the best shows Africa has ever seen. As the continent prepares for the milestone 10th AMVCA, the Reality TV Series Savant and producer extraordinaire is content to celebrate her sixth consecutive nomination. Find out if she clinches her second AMVCA win when the awards air live across all Africa Magic channels on May 11, 2024.


Kindly share this post
Continue Reading

Uncategorized

Banks Close 2m Accounts over BVN, NIN, Others

Published

on

Kindly share this post

Commercial banks in Nigeria closed 2.021 million bank accounts in the first quarter of 2024, Q1’24, to clean their books of questionable accounts and comply with regulatory orders on the linkage of bank accounts to the National Identity Number (NIN).

Banks Close 2m Accounts over BVN, NIN, Others

This is contained in a report by the Nigerian Interbank Settlement System (NIBSS), which also indicated that the number of inactive bank accounts grew month-on-month, MoM, by four million or 2.0 per cent to 19.7 million in March 2024 from 19.3 million in the previous month, February.

A bank account is classified inactive when it records zero transactions including deposits, withdrawals, transfers or point-of-sale transactions for six months.

However, details of the “Industry Bank Account Database”, a monthly data reported by banks, and compiled by the Nigerian Interbank Settlement System, NIBSS, also indicated that the number of active bank accounts grew by 6.62 million or 3.0 per cent to 219.64 million from 213.02 million in February.

Recall that in December 2023, the CBN issued a directive to all commercial banks in the country to restrict tier-1 accounts without proper Biometric Verification Number (BVN), and National Identity Number, NIN, that are not linked by Thursday, March 1st, 2024.

According to NIBSS data on BVN enrollment count, 61.6 million Nigerians have BVN as of April 2024.

 

Credit: Vanguard

 

 


Kindly share this post
Continue Reading

Trending