Burn

when

A crypto wallet drainer app posing as WalletConnect has stolen over $70,000 from unsuspecting users on the Google Play Store, according to a report by Check Point Research. The malicious app used “advanced evasion techniques” to avoid detection for over five months, tricking more than 150 users into linking their wallets. 
The fake app, originally called “Mestox Calculator,” first appeared in March and underwent several name changes to stay undetected. By using a harmless calculator front, the app passed Google Play’s security checks. However, once installed, it redirected mobile users to a backend that housed the wallet-drainer software, MS Drainer. 
<div class="wp-block-image"> 
 <figure class="aligncenter size-full">
 <img loading="lazy" decoding="async" width="528" height="333" src="https://www.cryptotimes.io/wp-content/uploads/2024/09/Crypto-Wallet-Drainer-App-Steals-70K-on-Google-Play-Store.png" alt="Crypto Wallet Drainer App Steals $70K on Google Play Store" class="wp-image-203852">
 <figcaption class="wp-element-caption">
 Source: <a href="https://twitter.com/WalletConnect/status/1840503480081068209" target="_blank" rel="noreferrer noopener nofollow">X</a>
 </figcaption>
 </figure>
</div> 
The app fooled users by asking them to connect their wallets and approve permissions, which allowed the attackers to steal funds. Not everyone was affected — only those who connected a wallet or met the malware’s specific targeting criteria were affected. 
Users are asked to accept various permissions to “verify their wallet,” which grants permission for the attacker’s address “to transfer the maximum amount of the specified asset,” Check Point Research said. 
According to a report by <a href="https://research.checkpoint.com/2024/wallet-scam-a-case-study-in-crypto-drainer-tactics/" target="_blank" rel="noreferrer noopener nofollow">Check Point Research</a>, after being downloaded more than 10,000 times, the app has since been removed from the store. This is the first time a drainer app has exclusively targeted mobile users, making it a significant security concern for crypto holders. 
“Fake reviews and consistent branding helped the app achieve over 10,000 downloads by ranking high in search results,” Check Point Research said. 
This incident highlights the growing threat of mobile-targeted scams in the cryptocurrency space. Users should always be cautious and verify the authenticity of apps, especially when it comes to connecting their wallets to unknown platforms. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/09/26/ranveer-allahbadias-youtube-channels-hacked-for-crypto-scam/" target="_blank" rel="noreferrer noopener">Ranveer Allahbadia’s YouTube Channels Hacked for Crypto Scam</a> 
</blockquote>

Fake WalletConnect App Steals $70K From Google Play Users

The Crypto Times

Other articles published on Sep 30, 2024

Will Shiba Inu (SHIB) Add Another Zero After This?

SuperEx丨Meme Coin: A Rising Power in the Cryptocurrency Market

5 Best Cheap Cryptos to Invest Now Under 1 Dollar September 29 – XRP, Sei, Beam, TRON

Kakao Executive Sues Blockchain Arm GroundX for $7.6M Crypto Wallet Hack

Hedge Fund Exec Predicts Bitcoin Will Hit New All-Time High in Q4, Regardless of U.S. Election Ou...

Coinpedia Fintech News

Join our free newsletter for daily crypto updates!