Crypto users fell victim to a malicious fake wallet app that siphoned off over $70,000 in cryptocurrency in a sophisticated phishing attack. This app, posing as WalletConnect, remained undetected on the Google Play Store for four months, tricking 150 users before being removed.
Checkpoint Research attributed this attack to crypto drainers, which are malicious tools for stealing digital assets, including NFTs and tokens. These usually drain through phishing, whereby users are deceived into signing fake transactions.
While cryptocurrency wallets have become more secure, cybercriminals still find new ways to bypass security measures; this recent case puts a new focus on mobile devices.
The fake app used the brand name of WalletConnect to make people believe that the service was legitimate. WalletConnect is a very popular service that connects dApps with crypto wallets through QR codes or deep links for ease of interacting with DeFi platforms.
This trust in the protocol is what the attackers have taken advantage of through clever obfuscation and anti-analysis techniques by creating a malicious version of an app.
Crypto Attackers Utilize Sophisticated Evasion Strategies
The smart build of this phishing attack was able to evade detection for this long but is now eventually out. The phishing app uses advanced evasion techniques such as redirects and user-agent checks to bypass Google’s security checks.
Users would then install the app and connect their wallets, after which the drainer initiates unauthorized transactions to drain users’ funds. Of the 10,000 who downloaded the fake application, around 150 users fell victim to this scam. Some managed to notice suspicious activity in time and protect their assets, while others may simply not have been hit by the specific criteria of the malware’s targeting system.
Although Google has now removed the malicious app from the store, this incident underlines the growing risks crypto users are exposed to every day as cybercriminals concoct even more complex schemes.
However, with phishing attacks and crypto drainers getting advanced, users need to be conscious of every app they download, let alone use for handling digital assets. In this regard, the case serves as a good lesson on the need for increased security and awareness concerning cryptocurrency.
Related Reading | Binance’s Changpeng Zhao Set to Rejoin Society with Big Plans: Report
