Cybersecurity experts have recently given several major warnings about more than 20 dangerous cryptocurrency wallet apps. Experts from Cyble Research and Intelligence Labs (CRIL) mentioned how these 20 wallets are infiltrating the Google Play Store. Additionally, people think that their downloads are protected by Google security policies, but these apps are so powerful that they are infiltrating the Google Play Store.
These apps may look genuine at first glance, but they’re actually part of a carefully crafted phishing campaign designed to steal your most sensitive financial credentials.
Here’s What We Know So Far About These Apps:
What Makes These Apps a Serious Risk?
These apps work in a way where they don’t just sit idly on your smartphone, but as soon as they are installed, they will actively prompt users to enter their 12 word recovery phrase. This 12 word phrase is used to access and restore cryptocurrency wallets.
If someone is entering their 12 word phrase asked by these apps, then cybercriminals can take complete control of their wallet and drain all assets without warning.
What makes these apps worse is the fact that these apps looks just like the professional apps and often mimic the look and feel of legitimate DeFi wallets such as SushiSwap, PancakeSwap, Hyperliquid, and Raydium.
How These Fake Wallet Apps Trick You
Under these apps, attackers take over developer accounts previously used for safe apps such as games or video tools and repurpose them to distribute fake crypto wallet applications. This technique gives them a head start by leveraging existing user trust.
These apps also embed phishing links inside privacy policy documents along with copying the design of the official apps. Additionally, they adopt nearly identical package names. The goal of these apps is to fly under the Google’s radar and quickly across a wide range of unsuspecting devices.
Key Signs You’re Using a Phishing App
- It asks for your 12-word wallet recovery phrase without warning.
- The app’s privacy policy contains shady or external links.
- It has poor grammar or broken UI elements.
- It imitates popular crypto wallets too closely.
- It may have a low download count despite claiming to be “official.”
Step-by-Step Guide to Deleting Suspicious Apps from Your Phone
- Open your device’s Settings app.
- Tap on ‘Apps’ or ‘Apps & Notifications’.
- Scroll through the list of installed apps.
- Tap the suspicious app and select ‘Uninstall’.
- Disable Device Admin Access if needed.
- Go to Settings > Security > Device Admin Apps
- Uncheck the box for the app in question. Then go back and uninstall it.
Names of These Apps:
- Suiet Wallet
- Sushiswap
- Raydium
- Hyperliquid
- BullX Crypto
- Pancake Swap
- OpenOcean Exchange
- Raydium
- Hyperliquid
- Meteora Exchange
- Harvest Finance blog
Get latest Tech and Auto news from Techlusive on our WhatsApp Channel, Facebook, X (Twitter), Instagram and YouTube.
