NEW: A network of mobile app publishing companies appears to have infected millions of phones with malware designed to generate fraudulent ad revenue.
A number of these companies are linked to a Russian firm formerly known as Adeco. 1/ occrp.org/en/investigati…
A tool developed by Adeco, known as Net2Share, allowed users to clone existing apps that were available on app stores.
But Net2Share had a hidden feature, according to a whistleblower.
Every cloned app was also infected with malware that financially benefited Adeco. 2/
Techniques deployed by this malware included spamming fake ad-views and spawning invisible browsers on infected phones, thereby generating what may have amounted to millions in fraudulent revenues. 3/
Former Adeco employees told OCCRP that businessman Aleksandr Novikov is behind the opaque firm, which rebranded itself to JustMoby after cybersecurity experts began reporting on the ad-fraud scheme. 4/
In the digital advertising industry, fraud is a booming business. One cybersecurity firm estimated losses from digital advertising fraud to hover around $35b per year — overtaking even credit card fraud, according to a 2019 report. 5/
Adeco, JustMoby, and related companies published at least 200 apps on Google Play and the Apple Store, with many still available.
In total, they’ve been downloaded more than 76m times. 6/
If you have additional information about Adeco or JustMoby, please consider contacting OCCRP journalists here.
NEW: Just over a year after the massive Beirut port explosion, OCCRP has answered one of the biggest questions of the disaster: Who owned the shipment of ammonium nitrate that blew up, killing over 200? 1/ occrp.org/en/investigati…
The dormant UK company that owned the 2,750 ton cargo, Savaro Ltd, has until now been hidden behind proxy owners and directors. But OCCRP can now reveal it is in fact controlled by a Ukrainian businessman, Volodymyr Verbonol, and partners. 2/
Verbonol’s Ukrainian partners include his father-in-law, a prominent businessman. Since the 2000s, the Savaro network has also hidden behind a web of offshore companies, and has traded in chemicals including the type of ammonium nitrate typically used to make explosives. 3/
John Ruvanga jumped at the chance to become a contract farmer for #ChinaTobacco’s Zimbabwe subsidiary, Tian Ze.
But he struggled to pay for the expensive products he had to buy from Tian Ze’s suppliers in $. In a few years, he had lost everything. 2/
Much of what is left of farmers’ income is sapped by a currency system run by Zimbabwe’s central bank.
By converting their $ earnings into local currencies at overvalued rates, the bank holds on to badly needed foreign currency. MPs say the system is illegal. 3/
The Kremlin is designating more and more top Russian journalists — including those in the OCCRP network — as "foreign agents," a label that can poison relationships with sources and advertisers.
NEW: Messages obtained by police show how aides to Catalonian leader Carles Puigdemont tried to avoid angering Moscow by advising him to avoid sensitive human rights issues, including the poisoning of Russian opposition leader Alexei Navalny. 1/5
Western experts and officials have accused Russia of meddling in Catalonia as part of a broader strategy to fuel discontent in the EU. Russian disinformation and contacts with separatists were especially apparent in the run-up to the region’s 2017 independence referendum. 2/5
The newly revealed text messages show that the Catalan separatists continued seeking Russian support well into 2020, tailoring a communications strategy that would avoid mention of the Belarusian opposition, Navalny, and Edward Snowden. 3/5
NEW: Brazilian authorities have opened multiple investigations into subsidiaries of Canadian asset management giant Brookfield, including probes into alleged environmental damage, OCCRP and @TheInterceptBr found. 1/4
@TheInterceptBr Brookfield has expanded rapidly into Brazil, but with some controversy. To complete its megaprojects, its Brazilian subsidiaries have dammed rivers, with one investigation examining the firm’s alleged role in flooding in the eastern city of Raul Soares. 2/4
@TheInterceptBr Some who have spoken out about the firm in Brazil say they have faced threats. Danilo Novaes says he’s feared for his life since he demanded Brookfield do more to help people whose livelihoods had been harmed by the Barra do Braúna hydroelectric plant. 3/4
@cuestion_p@LigaNoSilencio@MiamiHerald Colombian prosecutors allege the group, which diverted a river and poisoned it with mercury, included two U.S. citizens.
Reporters found them living large thousands of kilometers away, in the wealthy suburbs of Miami. 2/