when

<ul> 
 <li><strong>A fraudulent app called “Mestox Calculator” impersonated WalletConnect on Google Play, deceiving users and stealing over $70,000 from about 150 victims.</strong></li> 
 <li><strong>Using tactics like disguising as a calculator and posting fake reviews, the app avoided detection and manipulated user trust for five months.</strong></li> 
</ul>  
<p>In a concerning revelation, the crypto community was alerted to a significant security breach involving a fake application on Google Play that masqueraded as WalletConnect, a popular open-source protocol. This malicious app duped more than 150 individuals into losing collectively over $70,000 worth of <a href="https://www.ethnews.com/uruguay-spearheads-bitcoin-and-cryptocurrency-legislation-in-latin-america/">cryptocurrency</a>. The deception was uncovered by cybersecurity experts at Check Point Research (CPR), who reported that the app was downloaded over 10,000 times before its eventual removal from the platform.</p> 
<h2 id="unveiling-the-scam-mestox-calculator-s-hidden-agenda">Unveiling the Scam: Mestox Calculator’s Hidden Agenda</h2> 
<p>The journey of the fake app began on March 21, 2024, when it first appeared on Google Play as “Mestox Calculator.” Over time, it underwent several transformations, with its final guise being a deceptive version of a WalletConnect application. Despite these changes, the app cleverly retained its original URL, which misleadingly pointed to a benign-looking calculator website. This strategic choice allowed the app to bypass Google’s stringent review processes, which would typically vet new applications for security threats.</p> 
<p>CPR’s investigation highlighted that the scammers utilized advanced social engineering techniques to build credibility. The app featured fake reviews and professional-looking branding, enhancing its visibility and perceived legitimacy in search results. This manipulation led users to believe they were downloading a genuine <a href="https://www.ethnews.com/top-5-low-cost-cryptos-primed-to-turn-300-into-100k-by-2025/">crypto</a> tool, further facilitated by the app’s name exploiting the trust associated with the WalletConnect brand.</p> 
<h2 id="the-mechanics-of-fraud">The Mechanics of Fraud</h2> 
<p>Upon installation, the app prompted users to connect their <a href="https://www.ethnews.com/the-crypto-crime-wave-and-the-need-for-secure-wallets-here-are-3-solutions-you-can-count-on/">crypto wallets</a> and grant various permissions, which seemed routine for crypto-related applications. However, this was a ruse to initiate sophisticated draining techniques that triggered unauthorized transactions. The victims, unaware of the app’s true nature, unwittingly approved these transactions, allowing the fraudsters to directly transfer funds out of their wallets.</p> 
<p>Interestingly, the app targeted users based on their IP address and device type. Those who met the criteria were redirected to a backend that harbored the malicious MS Drainer software, which facilitated the fraudulent transactions.</p> 
<p>The post <a href="https://www.ethnews.com/sophisticated-scam-app-on-google-play-tricks-over-150-users-stealing-70k-in-crypto/">Sophisticated Scam App on Google Play Tricks Over 150 Users, Stealing $70K in Crypto</a> appeared first on <a href="https://www.ethnews.com">ETHNews</a>.</p>

Sophisticated Scam App on Google Play Tricks Over 150 Users, Stealing $70K in Crypto

Table of Contents

ETHNews

Other articles published on Oct 1, 2024

DOGE and Bonk Rival Memecoin Flying Pepe (PEPEFLY) Will Skyrocket Over 16,000% Ahead of Exchange ...

EigenLayer’s EIGEN Token Debuts, Surges into Top 100 Rankings

Blocksquare Partners with Polytrade to Enhance RWA Adoption (1 Oct)

Investor Who Made $100 Million on DOGE Is Now Bullish on This $0.04 Token, Predicting a 1,200% Ga...

Can October Propel Bitcoin and Ethereum Higher?

CleanSpark still to restore 165MW in aftermath of Hurricane Helene

Join our free newsletter for daily crypto updates!