FAKE WALLETCONNECT APP STOLES OVER $70,000 IN CRYPTOCURRENCY
For five months, a malicious app called WalletConnect, imitating a legitimate cryptocurrency project of the same name, was distributed via Google Play. This was brought to the attention of Check Point specialists.
The fake app positioned itself as a lightweight version of a Web3 wallet and had a high rating due to fake reviews. Users who installed it were taken to a malicious site where they were asked to authorize several transactions, which led to the theft of private keys and digital assets.
The number of downloads of the malicious WalletConnect reached 10,000, although this figure may be artificially inflated. At least 150 victims lost cryptocurrency worth over $70,000.
At the time of writing, the malicious app has been removed from the store.
