when

WalletConnect has warned crypto users about a fake app previously available on the Google Play Store. 
In a September 29 post on X, the organization behind the open-source protocol that enables secure connections between crypto wallets and decentralized applications (dApps) said the offending app has since been removed from Google Play, but not before it reportedly stole more than $70,000 worth of crypto from unsuspecting users. 
<h2 id="malicious-app-targeted-mobile-users">Malicious App Targeted Mobile Users</h2> 
The issue first came to light on September 26 when cybersecurity outfit Check Point Research (CPR) published a lengthy <a href="https://research.checkpoint.com/2024/wallet-scam-a-case-study-in-crypto-drainer-tactics/" target="_blank" rel="noopener" data-wpel-link="external">report</a> about it.&nbsp;In its write-up, CPR claimed that the fake app had posed as a legitimate crypto tool, exploiting the trust of the WalletConnect name and going undetected on the Google Play Store for at least five months. 
People allegedly downloaded the application more than 10,000 in that period, with more widespread damage being prevented due to many of the downloaders not actually connecting their wallets to the app. 
CPR also claimed that other users may not have met the malicious app’s targeting criteria. According to the security firm, the app reacted differently depending on a user’s IP address location and whether they were using a mobile device. 
Depending on the IP and the device they were on, users would be redirected to the app’s back-end, which contained the <a href="https://cryptopotato.com/ms-drainer-hackers-thwart-adsense-safeguards-steal-nearly-59-million/" target="_blank" rel="noopener" data-wpel-link="internal">MS Drainer</a> software. 
The offending app became available on the Google Play Store on March 21, 2024, as “Mestox Calculator.” It then underwent several changes before its final iteration as a WalletConnect application. 
Interestingly, despite the name changes, the app’s URL still pointed to what looked like a harmless website with a calculator.&nbsp;This technique reportedly allowed the app’s publishers to pass Google’s review process since any checks would simply load the calculator. 
CPR also noted that the app used advanced social engineering tactics, including fake reviews and branding, to increase its visibility in search results. This made many unwitting victims believe it was legitimate. 
<h2 id="150-people-fell-victim-to-the-scam">150 People Fell Victim to the Scam</h2> 
Once downloaded, the fake app guided users to connect their crypto wallets and to grant several permissions, after which its creators used sophisticated draining techniques to trigger fraudulent transactions. Unknowing users then approved the transactions, allowing the scammers to siphon funds directly from their wallets. 
Per the CPR report, about 150 users fell victim to the scam, losing crypto worth more than $70,000 between them. 
On its part WalletConnect has <a href="https://x.com/WalletConnect/status/1840503480081068209" target="_blank" rel="noopener" data-wpel-link="external">reminded</a> users that there is no official WalletConnect app and that they should stay vigilant against such scams, even as it works to prevent similar occurrences in the future. 
The post <a href="https://cryptopotato.com/fake-walletconnect-app-steals-70k-from-over-150-victims-on-google-play/" rel="nofollow">Fake WalletConnect App Steals $70K From Over 150 Victims on Google Play</a> appeared first on <a href="https://cryptopotato.com/" rel="nofollow">CryptoPotato</a>.

Fake WalletConnect App Steals $70K From Over 150 Victims on Google Play

Table of Contents

CryptoPotato_News

Other articles published on Sep 30, 2024

PEPE Price Pumps 30%, But Which Meme Coin is Best to Invest In Now?

Bitcoin (BTC) Supply In Profit Remains High, Bullish On-Chain Data Emerge

XRP Community Outraged as Ripple USD (RLUSD) Faces Freeze on XRPL

Dogwifhat Price Eyes 100% Surge As Bullish Signals Prevail: Is The Peak Near?

Valour debuts physically-backed Ethereum staking ETP on LSE

10 Best Online Casinos Canada – Top Canadian Casino Sites for Real Money Games in 2024

Join our free newsletter for daily crypto updates!