General News
Sophos Discovers Fake Apps Found on Apple’s App Store Used by Cybercriminals for CryptoRom Schemes

Sophos, a global leader in innovating and delivering cybersecurity as a service, on Wednesday released new findings on CryptoRom scams—elaborate financial fraud schemes that prey on and trick dating app users into making fake cryptocurrency investments—in its latest report, “Fraudulent Trading Apps Sneak into Apple and Google App Stores.”
The report details the first fake CryptoRom apps —Ace Pro and MBM_BitScan— to successfully bypass Apple’s strict security protocols.
Previously, cybercriminals used workaround techniques to convince victims to download illegitimate iPhone apps that were not sanctioned by the Apple App Store.
Sophos immediately notified Apple and Google; both have since removed the fraudulent apps from their respective stores.
“In general, it’s hard to get malware past the security review process in the Apple App Store. That’s why, when we originally began investigating CryptoRom scams targeting iOS users, the scammers would have to persuade users to first install a configuration profile before they could install the fake trading app.
“This obviously involves an additional level of social engineering—a level that’s hard to surmount. Many potential victims would be ‘alerted’ that something wasn’t right when they couldn’t directly download a supposedly legitimate app.
“By getting an application onto the App Store, the scammers have vastly increased their potential victim pool, particularly since most users inherently trust Apple,” said Jagadeesh Chandraiah, senior threat researcher, Sophos.
“Both apps are also not affected by iOS’ new Lockdown mode, which prevents scammers from loading mobile profiles helpful for social engineering. In fact, these CryptoRom scammers may be shifting their tactics—i.e., focusing on bypassing the App Store review process—in light of the security features in Lockdown.”
To lure the victim who was conned with Ace Pro, for instance, the scammers created and actively maintained a fake Facebook profile and persona of a woman supposedly living a lavish lifestyle in London.
After building a rapport with the victim, the scammers suggested the victim download the fraudulent Ace Pro app and the cryptocurrency fraud unfolded from there.
Ace Pro is described in the app store as a QR code scanner but is a fraudulent crypto trading platform. Once opened, users see a trading interface where they can supposedly deposit and withdraw currency. However, any money deposited goes directly to the scammers.
In order to get past App Store security, Sophos believes the scammers had the app connect to a remote website with benign functionality when it was originally submitted for review.
The domain included code for QR scanning to make it look legitimate to app reviewers. However, once the app was approved, the scammers redirected the app to an Asian-registered domain. This domain sends a request that responds with content from another host that ultimately delivers the fake trading interface.
MBM_BitScan is also an app for Android, but it is known as BitScan on Google Play. The two apps communicate with the same Command and Control (C2) infrastructure; this C2 infrastructure then communicates with a server that resembles a legitimate Japanese crypto firm. Everything else that is malicious is handled in a web interface, which is why it is hard for Google Play’s code reviewers to detect it as fraudulent.
CryptoRom, a subset of family of scams known as sha zhu pan literally “pig butchering plate”—is a well-organized, syndicated scam operation that uses a combination of romance-centered social engineering and fraudulent crypto trading applications and websites to lure victims and steal their money after gaining their confidence.
Sophos has been tracking and reporting on these scams that reap millions of dollars for two years.
Learn more about the criminals behind the CryptoRom rings and these fraudulent apps in “Fraudulent CryptoRom Trading Apps Sneak into Apple and Google App Stores” on Sophos.com.
General News
FG to Introduce New Tax Credit Scheme to Replace Pioneer Status Incentive

As part of Nigeria’s ongoing tax reform efforts, the federal government is proposing a new investment-driven incentive framework aimed at addressing long-standing inefficiencies in the current Pioneer Status Incentive (PSI).
The new scheme, known as the Economic Development Incentive (EDI), is designed to stimulate real economic activity by tying tax relief directly to verifiable investments.
This was the focus of a keynote address delivered by Taiwo Oyedele, Chairman of the Presidential Committee on Fiscal Policy and Tax Reforms, at BusinessDay’s Policy Intervention Series held on April 22 in Lagos.
According to Oyedele, a close review of the Pioneer Status Incentive revealed structural flaws that have undermined its effectiveness. “Once granted Pioneer Status,” he said, “companies may import goods classified as ‘pioneer products’ tax-free, effectively allowing them to operate without tax obligations—even with minimal value addition to the economy.”
He further noted that while the PSI was initially designed to encourage investment, it created loopholes and ambiguities. For example, businesses often benefit from extended tax relief even after the designated holiday period ends.
“The assets used during the Pioneer period are essentially frozen in time,” Oyedele explained. “They’re treated as if acquired after the incentive ends—meaning companies only start claiming deductions once the holiday period is over. This creates long-term tax advantages that go well beyond the policy’s original intent.”
He also pointed out that the PSI makes it difficult for the government to quantify revenue forgone and for investors to clearly assess the value of the incentive—undermining transparency on both sides.
The Economic Development Incentive
The proposed Economic Development Incentive is a departure from the one-size-fits-all model. Instead, it’s structured around priority sectors—primarily manufacturing, followed by services and infrastructure—that have strong multiplier effects on the economy.
Another key design feature is the introduction of minimum investment thresholds to ensure only scalable and impactful projects qualify. For instance, companies operating in capital-intensive sectors like utilities would need to invest at least N200 billion to be eligible for the tax credit.
“The EDI is about real impact,” Oyedele said. “It’s time-bound, sector-targeted, and tied to actual capital deployment—not just approval on paper.”
Unlike blanket tax holidays, the EDI grants companies a 5 percent annual tax credit over five years—totaling 25 percent of the value of their qualifying investment. Importantly, this is in addition to existing capital allowances, making the scheme particularly attractive to long-term investors.
Crucially, approval under the scheme does not mean the investment has already been made. It only confirms that the company has a verified plan. The incentive kicks in only after capital is actually deployed, and all investments are subject to inspection by the Industrial Inspectorate Division.
Oyedele broke down how the system works using practical examples:
If a company invests N10 billion in Year 1, it earns a N500 million tax credit each year for five years. If an additional N5 billion is invested in Year 2, that new investment begins its own five-year 5 percent cycle—N250 million annually until Year 6.
If the company continues investing progressively, each round of investment starts a new five-year cycle of tax credits, potentially extending the benefit period up to 10 years.
For instance, if a business has a N15 million tax liability in a given year and applies N25 million in tax credits, its liability is wiped out entirely, with the N10 million balance rolled over to subsequent years.
However, there’s a catch: if a company fails to follow through on its investment plan or halts capital deployment, unused credits are forfeited. This accountability mechanism ensures that only consistent and credible investments are rewarded.
General News
FlashChange Partners Ruth Foundation to Empower Vulnerable Children in Alimosho with Skill Acquisition

In an inspiring initiative to uplift the next generation, FlashChange and Ruth Foundation have successfully implemented the “Orphanage Skill Acquisition Assembly 2.0 program,” a skills empowerment program for vulnerable children in Alimosho, Local Government Area of Lagos state.
The five-day programme, which began on Monday, April 14, was created to equip vulnerable children aged 4 to 18 years with essential life skills such as financial literacy, fashion design, photography, creative arts, cooking, and leadership development
Speaking at the closing ceremony of this year’s edition of the programme, the Chief Operating Officer, Flashchange, Olamide Ajibola said, “We are delighted to be part of this life-changing initiative.
“At FlashChange, we believe that children are the heartbeat of every community, by investing in their development today, we are not just shaping the future of individuals but nurturing future leaders, creators, and change-makers that would make a positive contribution to the growth and development of the society in the near future.”
“Initiatives of this nature gladdens our heart and we are open and willing to participate in them at any time. In the coming months, we hope to do more in that area as our own little way of improving society. This is in line with our CSR pillars, which include human capital development.”
Ajibola appreciated the benefitting children for accepting to be part of the life changing training which has the capacity to catapult them to a brighter future. The facilitators were also commended for impacting the children with the skills and knowledge to help shape their lives.
The founder Ruth Foundation, Itunuoluwa Ruth Da-Silva, in her remarks, expressed the foundation’s deepest appreciation to partnering organizations like FlashChange for believing in the vision and throwing their full weight behind it.
She said, “It will interest you to know that 153 vulnerable children benefitted from the Orphanage Skill Acquisition Assembly 2.0 programme and the training ran simultaneously at Compassionate Orphanage home; Precious Pearl Orphanage; Little Saints Orphanage and House of Mercy Orphanage respectively. Providing the children access to knowledge and skills early in life to create a ripple effect that can transform the entire community.”
The Chief Marketing Officer, FlashChange Jesujoba Ojelabi commended Ruth foundation for the initiative and urged the children to take the skills learnt seriously, as it has the capacity to change their lives for good.
He said, “As a company, we would be proud to lend our support to the foundation whenever we are called upon to do so in the future. My candid advice to you children would be this, to be great ambassadors of this initiative, you need to continuously put to practice the skills and knowledge you have acquired from the programme. We are indeed proud of you all and the success stories recorded so far.”
To support the continuous development of the children the following items were donated; electric sewing machine, cake mixer; packs of Yeye yarn, packs of pins, some stitch markers, scissors, measuring scale, make-up kit box filled with make-up tools among several others.
FlashChange and Ruth Foundation therefore urge community leaders, government organizations, private sector partners, and stakeholders to support programmes of this nature aimed at equipping children with the skills they need to thrive in a world that is evolving quickly.
General News
EFCC Clarifies SCUML Certificate Misuse amid CBEX Ponzi Scheme Scandal

Economic and Financial Crimes Commission, EFCC, has dismissed the claims that the defunct digital asset trading platform, CBEX, was registered with its Special Control Unit against Money Laundering, SCUML.
However, EFCC stated that ST Technologies and not CBEX registered with SCUML, saying that the certificate didn’t imply clearance by the Commission.
The clarification comes after Lesley Kessy Oviritsa, one of the victims of the CBEX Ponzi Scheme said she fell prey to CBEX after seeing and verifying its CAC and SCUML Certificate.
Oviritsa claimed they had no reason to suspect foul play, especially since they claimed their SEC certificate would be ready by May 2025.
Nigeria CommunicationsWeek reported how CBEX swept over N1.3 trillion from their investors’ accounts.
In a post on its official handle on X on Monday, EFCC said the Commission is not a clearing house or regulatory authority of online businesses.
The post read: “SCUML Certificate Is Not CLEARANCE BY EFCC.
“ST Technologies (not CBEX) registered with the Special Control Unit against Money Laundering, SCUML in line with Section 17 of the Money Laundering, (Prevention & Prohibition) Act, 2022.
“Registration is a statutory requirement for all Designated Non-Financial Businesses and Professions, DNFBPs, in Nigeria in consonance with Nigeria’s Anti-Money Laundering/ Control of Financing Terrorism, AML/CFT regime.
“The EFCC is not a clearing house or regulatory authority of online businesses.
“But financial fraud of any kind is the remit of the Commission, and it is committed to ensuring justice for victims of the CBEX scam.”
- Telecom3 days ago
MTN Nigeria Takes Broadband Services to the Next Level with FibreX Launch
- Telecom2 days ago
Digital Transformation Remains Africa’s Gateway to Economic Advancement – Adumike
- News3 days ago
SERAP Files Lawsuit Against NBC Over Ban on Eedris Abdulkareem’s Protest Song Tell Your Papa
- Telecom2 days ago
PAFON 2.0: Experts Discuss Pathways to Boost Financial Inclusion in Nigeria
- General News2 days ago
EFCC Clarifies SCUML Certificate Misuse amid CBEX Ponzi Scheme Scandal
- E-Financial2 days ago
CBN, NGX Group Defend Economic Reforms at Nasdaq
- E-Financial3 days ago
FCMB Group Redefines Corporate Storytelling with The Power Of The Group TVC
- Telecom21 hours ago
MTN Nigeria Faces Class Action Lawsuit over Alleged Data Mismanagement