Phishing Campaign Targets Crypto Users Through Fake Wallet Apps
Security researchers have identified an active phishing campaign that distributes counterfeit cryptocurrency wallet applications engineered to steal users’ recovery phrases. The fake apps closely imitate the branding of popular wallets and spread through unofficial download links, search ads, and social media messages. Once a victim enters a seed phrase, attackers can drain associated funds. Researchers recommend downloading wallet software only from official websites or verified app-store listings, verifying developer details, and never entering a recovery phrase into any app or web form. For Indian users, the alert is especially relevant amid growing retail participation and increased targeting of newer users. Reporting fraudulent apps to app stores and relevant authorities can help slow their distribution and protect others.
Key Takeaways
- Fake wallet apps aim to steal recovery phrases.
- Download wallets only from official, verified sources.
- Never enter a seed phrase into an app or website.
Summary generated by IndiCrypto from BeInCrypto. IndiCrypto is a news aggregator and does not provide investment advice. Read the original article for full context.
More in Security
Bitget hackers move $4 million into Zcash’s private pool, making funds harder to trace
Three transfers pushed about 15% of the stolen ZEC into Ironwood, where payments hide their senders, recipients and amounts.
OpenAI, Google and Meta pledge outside AI audits under voluntary White House deal
Six companies signed a safety pact covering hacking and biological threats, with no penalties or deadline for putting the checks in place.
Major DeFi Protocol Patches Vulnerability Before Funds Affected
A leading decentralised finance protocol has patched a smart-contract vulnerability identified by independent security researchers. The team says the flaw was fixed before any user funds were affected, and a bug-bounty reward was paid to the reporting…