General News
Sophos Discovers Fake Apps Found on Apple’s App Store Used by Cybercriminals for CryptoRom Schemes
Sophos, a global leader in innovating and delivering cybersecurity as a service, on Wednesday released new findings on CryptoRom scams—elaborate financial fraud schemes that prey on and trick dating app users into making fake cryptocurrency investments—in its latest report, “Fraudulent Trading Apps Sneak into Apple and Google App Stores.”
The report details the first fake CryptoRom apps —Ace Pro and MBM_BitScan— to successfully bypass Apple’s strict security protocols.
Previously, cybercriminals used workaround techniques to convince victims to download illegitimate iPhone apps that were not sanctioned by the Apple App Store.
Sophos immediately notified Apple and Google; both have since removed the fraudulent apps from their respective stores.
“In general, it’s hard to get malware past the security review process in the Apple App Store. That’s why, when we originally began investigating CryptoRom scams targeting iOS users, the scammers would have to persuade users to first install a configuration profile before they could install the fake trading app.
“This obviously involves an additional level of social engineering—a level that’s hard to surmount. Many potential victims would be ‘alerted’ that something wasn’t right when they couldn’t directly download a supposedly legitimate app.
“By getting an application onto the App Store, the scammers have vastly increased their potential victim pool, particularly since most users inherently trust Apple,” said Jagadeesh Chandraiah, senior threat researcher, Sophos.
“Both apps are also not affected by iOS’ new Lockdown mode, which prevents scammers from loading mobile profiles helpful for social engineering. In fact, these CryptoRom scammers may be shifting their tactics—i.e., focusing on bypassing the App Store review process—in light of the security features in Lockdown.”
To lure the victim who was conned with Ace Pro, for instance, the scammers created and actively maintained a fake Facebook profile and persona of a woman supposedly living a lavish lifestyle in London.
After building a rapport with the victim, the scammers suggested the victim download the fraudulent Ace Pro app and the cryptocurrency fraud unfolded from there.
Ace Pro is described in the app store as a QR code scanner but is a fraudulent crypto trading platform. Once opened, users see a trading interface where they can supposedly deposit and withdraw currency. However, any money deposited goes directly to the scammers.
In order to get past App Store security, Sophos believes the scammers had the app connect to a remote website with benign functionality when it was originally submitted for review.
The domain included code for QR scanning to make it look legitimate to app reviewers. However, once the app was approved, the scammers redirected the app to an Asian-registered domain. This domain sends a request that responds with content from another host that ultimately delivers the fake trading interface.
MBM_BitScan is also an app for Android, but it is known as BitScan on Google Play. The two apps communicate with the same Command and Control (C2) infrastructure; this C2 infrastructure then communicates with a server that resembles a legitimate Japanese crypto firm. Everything else that is malicious is handled in a web interface, which is why it is hard for Google Play’s code reviewers to detect it as fraudulent.
CryptoRom, a subset of family of scams known as sha zhu pan literally “pig butchering plate”—is a well-organized, syndicated scam operation that uses a combination of romance-centered social engineering and fraudulent crypto trading applications and websites to lure victims and steal their money after gaining their confidence.
Sophos has been tracking and reporting on these scams that reap millions of dollars for two years.
Learn more about the criminals behind the CryptoRom rings and these fraudulent apps in “Fraudulent CryptoRom Trading Apps Sneak into Apple and Google App Stores” on Sophos.com.
MultiChoice, a CANAL+ company, has retained the distribution rights to 12 Warner Bros. Discovery thematic channels following the signing of a new multi-year, multi-territory agreement between CANAL+ Group and Warner Bros. Discovery, marking a significant expansion of their long-standing partnership.
MultiChoice
The new deal, which spans several regions across Africa and Europe, covers the distribution of HBO Max as well as the renewal of selected Warner Bros. Discovery thematic channels. It represents a major milestone in the companies’ international collaboration and strengthens content offerings across MultiChoice Group territories.
MultiChoice disclosed that this agreement builds on earlier partnerships concluded in Europe. “It builds on the landmark agreements concluded in France in 2024,including the renewal of the exclusive pay-TV window for Warner Bros. Pictures films just six months after their theatrical release in France and the integration of HBO Max within select CANAL+ group offers – as well as in Poland in 2025, with the renewal of the distribution agreement for 22 thematic channels (including TVN 24 and Eurosport) and 4 free-to-air channels (including TVN).”
Under the renewed arrangement, MultiChoice Group will continue to distribute 12 Warner Bros. Discovery thematic channels across its territories, with some channels offered on an exclusive basis. CNN International and Cartoon Network will remain exclusive to South Africa while being distributed non-exclusively in other markets. Cartoon Network Porto will be exclusive in Angola and Mozambique and non-exclusive elsewhere. Other channels such as Discovery Channel, TLC, HGTV, Food Network, TNT Africa, Travel, ID and Cartoonito will be offered on a non-exclusive basis.
According to the partners, the deal reinforces CANAL+ Group’s channel portfolio on the continent. “This agreement enables CANAL+ Group to strengthen its entertainment, kids, news, and documentary channel offerings in African markets.”
The agreement is also expected to improve access for CANAL+ Group subscribers to Warner Bros. Discovery’s premium content through HBO Max and selected channels, including globally recognised series and films, further extending the studio’s international reach while consolidating MultiChoice’s content offering in key markets.
Nigeria Police Force has suspended nationwide enforcement of its tinted glass permit policy, hours before its scheduled rollout, in compliance with a Delta State High Court order.
Tinted glass permit
The policy, set for January 2, 2026, aimed to curb vehicle-related crimes but faced legal challenge from a private citizen against the Inspector-General of Police, the force, and Delta Police Commissioner.
An ex parte injunction issued in December 2025 restrained enforcement pending suit determination, prompting the hold announced by spokesperson Benjamin Hundeyin on January 1.
Police entered appearance, filed preliminary objections, and sought injunction vacation; hearing adjourned to January 20, 2026.
The Nigerian Bar Association condemned initial police plans as “executive recklessness,” accusing disregard for rule of law, while police insisted no permanent bar existed on statutory duties.
IGP Kayode Egbetokun reiterated adherence to law while prioritising public safety via intelligence-led strategies during proceedings.
Mr. Thompson Sunday, the Managing Director/Chief Executive of the Nigeria Deposit Insurance Corporation (NDIC), has reaffirmed the Corporation’s strict compliance with fiscal and financial regulations, including the provisions of the Fiscal Responsibility Act (FRA) 2007, noting that the NDIC has consistently remitted the required percentage of its earnings to the Federal Government.
Mr. Sunday made this known during a courtesy visit to the Managing Director/Chief Executive of the Ministry of Finance Incorporated (MOFI), Dr. Armstrong Takang, as part of NDIC’s ongoing engagement with key stakeholders following his formal assumption of office in July 2025.
According to him, NDIC takes financial accountability and transparency seriously, stressing that the Corporation complies fully with statutory remittance obligations, including the payment of 20 per cent of gross earnings or 80 per cent of net surplus to the Federal Government, as applicable. He added that NDIC also submits its financial statements ahead of statutory deadlines.
The NDIC MD/CE explained that this culture of compliance aligns with the Corporation’s role as a key institution within Nigeria’s financial safety-net, charged with protecting depositors and promoting confidence in the banking system. He emphasized that adherence to fiscal discipline remains central to NDIC’s credibility and effectiveness.
Mr. Sunday further disclosed that NDIC also complies with the Federal Government’s 50 per cent cost-to-income ratio policy, although he noted that the policy poses operational constraints. He explained that the deductions affect NDIC’s ability to build a strong Deposit Insurance Fund, which is needed to respond effectively to bank failures.
He stressed that international best practices under the Core Principles for Effective Deposit Insurance issued by the International Association of Deposit Insurers (IADI) require deposit insurers to maintain adequate funds to reimburse depositors when banks fail without recourse to government, adding that the NDIC is seeking an exemption to strengthen its capacity in this regard.
Mr. Sunday described MOFI as a critical stakeholder, noting that the Federal Government, through MOFI, holds a 40 per cent equity stake in NDIC. He said sustained collaboration with MOFI is essential to ensuring that NDIC continues to meet its obligations to government while effectively safeguarding depositors’ funds.
In his remarks, Dr. Takang commended the NDIC for its exemplary collaborative spirit and acknowledged the Corporation’s compliance with fiscal regulations. He assured that MOFI would continue to engage the Federal Ministry of Finance on NDIC’s behalf, noting that a strong NDIC is vital to sustaining confidence in Nigeria’s financial system.
Both institutions reaffirmed their commitment to continued cooperation, transparency and accountability, with Mr. Sunday reiterating that NDIC remains focused on balancing regulatory compliance with its overriding mandate of depositor protection and financial system stability.
Fidelity Bank Appoints Onwughalu as New Chairman After Chike-Obi’s Tenure
DStv Offers Instant Package Upgrade for Customers from January to February
HURIWA Demands Accountability from SEDC Over N140Bn Budget Utilisation
FIRS Transforms into NRS as Nigeria Ushers in New Tax Era
MultiChoice Secures 12 Warner Bros. Discovery Channels in New Multi-Year Deal
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
FIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
Report Reveals Half of 2025’s Compromised Passwords were Already Leaked
Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers
General News3 days agoNigeria Police suspends tinted glass permit enforcement over court injunction
E-Financial2 days agoFidelity Bank Appoints Onwughalu as New Chairman After Chike-Obi’s Tenure
Broadcasting2 days agoDStv Offers Instant Package Upgrade for Customers from January to February
Broadcasting2 days agoFIRS Transforms into NRS as Nigeria Ushers in New Tax Era
News2 days agoHURIWA Demands Accountability from SEDC Over N140Bn Budget Utilisation
General News2 days agoMultiChoice Secures 12 Warner Bros. Discovery Channels in New Multi-Year Deal