TLDR InfoSec · ATTACKS & VULNERABILITIES

FAKE WALLETCONNECT APP ON GOOGLE PLAY STEALS ANDROID USERS' CRYPTO

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

A fake app called WallConnect mimicked the legitimate WalletConnect project on Google Play, tricking over 10,000 users into downloading it. Once installed, the app led users to a malicious website where they were tricked into authorizing transactions, resulting in the theft of sensitive wallet information and digital assets totaling over $70,000 from 150 victims.