Kaspersky Labs has uncovered a dangerous malware hidden in software development kits used to create Android and iOS apps. The malware, known as SparkCat, scans images on infected devices to find crypto wallet recovery phrases, allowing hackers to steal funds without needing passwords. It also targets other sensitive data stored in screenshots, such as passwords and private messages.
The malware uses Google’s ML Kit OCR to extract text from images and has been downloaded around 242,000 times, primarily affecting users in Europe and Asia. It is embedded in dozens of real and fake apps on Google’s Play Store and Apple’s App Store, disguised as analytics modules. Kaspersky’s researchers suspect a supply chain attack or intentional embedding by developers.
While the origin of the malware remains unclear, analysis of its code suggests the developer is fluent in Chinese. Security experts advise users to avoid storing sensitive information in images and to remove any suspicious apps. Google and Apple have yet to respond to the findings.
The European Commission has launched the OpenEuroLLM Project, a new initiative aimed at developing open-source, multilingual AI models. The project, which began on February 1, is supported by a consortium of 20 European research institutions, companies, and EuroHPC centres. Coordinated by Jan Hajič from Charles University and co-led by Peter Sarlin of AMD Silo AI, the project is designed to produce large language models (LLMs) that are proficient in all EU languages and comply with the bloc’s regulatory framework.
The OpenEuroLLM Project has been awarded the Strategic Technologies for Europe Platform (STEP) Seal, a recognition granted to high-quality initiatives under the Digital Europe Programme. This endorsement highlights the project’s importance as a critical technology for Europe. The LLMs developed will be open-sourced, allowing their use for commercial, industrial, and public sector purposes. The project promises full transparency, with public access to documentation, training codes, and evaluation metrics once the models are released.
The initiative aims to democratise access to high-quality AI technologies, helping European companies remain competitive globally and empowering public organisations to deliver impactful services. While the timeline for model release and specific focus areas have not yet been detailed, the European Commission has already committed funding and anticipates attracting further investors in the coming weeks.
India‘s finance ministry has issued an advisory urging employees to refrain from using AI tools like ChatGPT and DeepSeek for official tasks, citing concerns over the potential risks to the confidentiality of government data. The directive, dated January 29, highlights the dangers of AI apps on office devices, warning that they could jeopardise the security of sensitive documents and information.
This move comes amid similar actions taken by other countries such as Australia and Italy, which have restricted the use of DeepSeek due to data security concerns. The advisory surfaced just ahead of OpenAI CEO Sam Altman’s visit to India, where he is scheduled to meet with the IT minister.
Representatives from India’s finance ministry, OpenAI, and DeepSeek have yet to comment on the matter. It remains unclear whether other Indian ministries have implemented similar measures.
A former Google software engineer faces additional charges in the US for allegedly stealing AI trade secrets to benefit Chinese companies. Prosecutors announced a 14-count indictment against Linwei Ding, also known as Leon Ding, accusing him of economic espionage and theft of trade secrets. Each charge carries significant prison terms and fines.
Ding, a Chinese national, was initially charged last March and remains free on bond. His case is being handled by a US task force established to prevent the transfer of advanced technology to countries such as China and Russia.
Prosecutors claim Ding stole information on Google’s supercomputing data centres used to train large AI models, including confidential chip blueprints intended to give the company a competitive edge.
Ding allegedly began his thefts in 2022 after being recruited by a Chinese technology firm. By 2023, he had uploaded over 1,000 confidential files and shared a presentation with employees of a startup he founded, citing China’s push for AI development.
Google has cooperated with authorities but has not been charged in the case. Discussions between prosecutors and defence lawyers indicate the case may go to trial.
The European Commission has unveiled new guidelines restricting how AI can be used in workplaces and online services. Employers will be prohibited from using AI to monitor workers’ emotions, while websites will be banned from using AI-driven techniques that manipulate users into spending money. These measures are part of the EU’s Artificial Intelligence Act, which takes full effect in 2026, though some rules, including the ban on certain practices, apply from February 2024.
The AI Act also prohibits social scoring based on unrelated personal data, AI-enabled exploitation of vulnerable users, and predictive policing based solely on biometric data. AI-powered facial recognition CCTV for law enforcement will be heavily restricted, except under strict conditions. The EU has given member states until August to designate authorities responsible for enforcing these rules, with breaches potentially leading to fines of up to 7% of a company’s global revenue.
Europe’s approach to AI regulation is significantly stricter than that of the United States, where compliance is voluntary, and contrasts with China‘s model, which prioritises state control. The guidelines aim to provide clarity for businesses and enforcement agencies while ensuring AI is used ethically and responsibly across the region.
Belgium‘s data protection authority has received a complaint about Chinese AI firm DeepSeek, potentially leading to an investigation. A spokesperson confirmed the complaint but declined to provide further details while the case is being handled.
Regulators in Luxembourg have not received any complaints but are monitoring DeepSeek’s latest AI model, citing potential risks for users. The country’s data protection agency is considering a broader review in collaboration with European regulators.
Authorities across Europe may examine how DeepSeek processes user data. The European Data Protection Board could play a role in assessing the AI company’s compliance with privacy laws.
The emergence of China’s DeepSeek, a low-cost AI model that requires less advanced chips, initially sparked a global selloff in tech stocks. Investors raised concerns about the future of Western investments in chipmakers and data centres. Nvidia, a leader in the sector, saw its market value plummet by nearly $600 billion, marking the largest one-day loss in company history. However, since then, tech stocks, particularly in Europe, have rebounded, with some investors turning to a 160-year-old economic theory to explain the market’s recovery: the Jevons Paradox.
The Jevons Paradox, proposed by economist William Stanley Jevons, suggests that as a resource becomes more efficient, its demand can actually increase. In the context of AI, the paradox argues that as AI technology becomes cheaper and more accessible, its use will likely expand. This idea is gaining traction among European investors, with some believing that lower AI costs could drive a new wave of investment in software and AI technologies, particularly in areas like data and inference.
Despite some scepticism, several fund managers have embraced the paradox as a reason for optimism in AI markets. The potential need for data centres and infrastructure to support AI growth remains a key focus, though the rise of more efficient software like DeepSeek has led some to question whether the sector will require as many resources as previously expected. While the long-term outlook remains uncertain, many see the reduction in AI costs as a catalyst for further investment and growth, especially in European companies that rely on AI technologies.
Not everyone is convinced, however, with some analysts pointing to Nvidia’s rapid stock rise as a sign that market dynamics may be more complex than the Jevons Paradox suggests. Nonetheless, for many, the falling costs of AI technology have reinforced the belief that demand for AI-related investments will continue to thrive.
Donald Trump has said there is significant interest in purchasing TikTok, as his administration looks to broker a sale of the Chinese-owned app. The former president posted on Truth Social, stating that such a deal would benefit China and all involved parties.
The fate of TikTok remains uncertain following a US law that requires ByteDance, its Chinese parent company, to sell the app or face a nationwide ban. The law came into effect on 19 January, raising concerns over national security and data privacy.
After taking office, Trump signed an executive order delaying the enforcement of the law by 75 days, allowing more time for negotiations. The move has reignited debate over foreign ownership of technology platforms and their impact on US security.
Belgium‘s new government, led by Prime Minister Bart De Wever, has announced plans to utilise AI tools in law enforcement, including facial recognition technology for detecting criminals. The initiative will be overseen by Vanessa Matz, the country’s first federal minister for digitalisation, AI, and privacy. The AI policy is set to comply with the EU’s AI Act, which bans high-risk systems like facial recognition but allows exceptions for law enforcement under strict regulations.
Alongside AI applications, the Belgian government also aims to combat disinformation by promoting transparency in online platforms and increasing collaboration with tech companies and media. The government’s approach to digitalisation also includes a long-term strategy to improve telecom infrastructure, focusing on providing ultra-fast internet access to all companies by 2030 and preparing for potential 6G rollouts.
The government has outlined a significant digital strategy that seeks to balance technological advancements with strong privacy and legal protections. As part of this, they are working on expanding camera legislation for smarter surveillance applications. These moves are part of broader efforts to strengthen the country’s digital capabilities in the coming years.
The US Treasury is facing a lawsuit over claims it unlawfully granted Elon Musk’s Department of Government Efficiency (DOGE) access to millions of Americans’ financial and personal data. The American Federation of Labor and Congress of Industrial Organizations (AFL-CIO) filed the lawsuit in Washington, DC, accusing the Treasury and Secretary Scott Bessent of illegally sharing sensitive information.
The lawsuit follows concerns raised by US Senator Ron Wyden, who alleged that DOGE had full access to the Treasury’s payments system, which includes names, Social Security numbers, bank account details, and other private data. Prominent Democrats, including Senate leader Chuck Schumer and Senator Elizabeth Warren, have condemned the move, arguing that DOGE lacks any legal authority over federal spending or data access.
Schumer has pledged to introduce legislation to prevent further interference, stating that DOGE is not a legitimate government agency. Warren warned that the system is now “at the mercy of Elon Musk,” raising fears over potential misuse of financial records. The Treasury and DOGE have yet to respond to the allegations.
