cryptd.in

另类 LinkedIn 适合加密人才

iPhone Users Beware: Kaspersky Flags 26 Fake Crypto Wallet Apps That Could Drain Your Funds

-

由

cryptd.in
于

Cybersecurity firm Kaspersky has identified 26 fraudulent cryptocurrency wallet applications on Apple’s App Store that are designed to steal users’ digital assets.

The company’s Threat Research team found that the apps imitate popular crypto wallets, such as MetaMask, Ledger, Trust Wallet, Coinbase, TokenPocket, imToken, and Bitpie, by copying their names and visual branding to appear legitimate. Once opened, these applications redirect users to phishing pages that resemble the App Store interface and prompt them to download a second application, which is actually a trojanized wallet that can drain cryptocurrency funds.

How The Scam Works

Kaspersky said the campaign has been active since at least fall 2025 and, with “moderate confidence,” linked it to the threat actors behind SparkKitty, a previously identified iOS malware strain. Official versions of many of these wallet apps are not available in the Chinese iOS App Store; most of the detected phishing apps were distributed specifically to users in China, though the malicious payload itself does not include regional restrictions. This essentially means that users outside China could also be affected. Kaspersky confirmed it has reported all identified apps to Apple.

According to the findings, the fraudulent apps include basic, unrelated features such as games, calculators, or task managers to create an appearance of legitimacy and pass initial scrutiny. After installation, they guide users through a process that opens a fake App Store webpage and encourages them to download what appears to be the intended wallet application.

This installation process works similarly to SparkKitty, using Apple’s enterprise developer tools for corporate app distribution. Users are prompted to install a developer profile on their device, which allows them to install apps from outside the App Store. Attackers rely on users overlooking this step, enabling the installation of malicious software.

Once installed, the trojanized wallet applications are designed to mimic the behavior of the specific wallet they impersonate. They target both hot and cold wallets.

Kaspersky’s mobile malware expert, Sergey Puzan, stated that while the apps themselves may not contain harmful code, they serve as entry points in a broader attack chain that ultimately leads to malware installation. The researcher further warned,

“By paying a fee and setting up a developer account, the attackers can target any iOS device if the user succumbs to the phishing tactic. Users should be wary of the risks related to managing their crypto wallets even on devices that they consider safe, such as iPhones. We expect there may be more trojanized crypto apps distributed with a similar tactic.”

Counterfeit Ledger Device

The latest report comes days after a counterfeit Ledger Nano S Plus device sold through an online marketplace was exposed as part of a sophisticated phishing operation designed to steal crypto wallet credentials by a Brazilian cybersecurity researcher. The device, which was marketed and priced like an official product, initially appeared genuine but failed verification when connected to Ledger Live.

Upon opening the device, the researcher found internal components that did not match legitimate hardware, including a chip with its markings removed and additional WiFi and Bluetooth antennas not present in authentic Ledger wallets. Further examination of the firmware revealed that both PIN codes and seed phrases were stored in plaintext, along with references to external servers, indicating that the device was designed to capture and transmit sensitive data.

The researcher acknowledged that this attack does not involve any flaw in Ledger’s security, but instead uses fake devices, harmful apps, and phishing tricks to target users.

职位 iPhone Users Beware: Kaspersky Flags 26 Fake Crypto Wallet Apps That Could Drain Your Funds 首次出现在 加密土豆.

评论

發佈留言

發佈留言必須填寫的電子郵件地址不會公開。 必填欄位標示為 *

最新信息

热门类别

zh_TW 繁體中文
zh_TW 繁體中文 en_US English ro_RO Română et Eesti ko_KR 한국어 ja 日本語 ru_RU Русский de_DE Deutsch es_ES Español zh_CN 简体中文 fr_FR Français pt_PT Português it_IT Italiano pl_PL Polski tr_TR Türkçe nl_NL Nederlands id_ID Bahasa Indonesia el Ελληνικά uk Українська bg_BG Български cs_CZ Čeština fi Suomi hu_HU Magyar lv Latviešu valoda lt_LT Lietuvių kalba nb_NO Norsk bokmål sk_SK Slovenčina sl_SI Slovenščina sv_SE Svenska

搜索网站

热门故事

标签

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #Bitcoin (435) #BitcoinETF (3) #itcoinFundamentals (1) # 比特币处理 (1) # 比特币价格 (5) # 比特币价格水平 (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #itcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTC 收购 (1) 1TP5 看涨预测 (1) #BullishSentiment (1) #C 中国矿业 (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (73) #ogecoinGains (1) #ogecoinVolume (1) #DutchCourt (2) #ECommerce (1) #El萨尔瓦多比特币 (1) #E以太坊 (69) #EthereumPain (1) #E以太坊价格 (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #F 财务影响 (1) #F 财务隐私 (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #InflationData (1) #Investment (1) #InvestmentLoss (1) #JapaneseFirm (1) #L LegalAction (1) #L 法律影响 (1) #Legislation (1) #LightningNetwork (1) #M 市场分析 (3) #M 市场监测 (1) #M 市场预测 (1) #M 市场预测 (1) #M 市场投影 (1) #M 市场支持 (1) #M 市场波动性 (1) #M 婚姻 (1) #MemeCoin (5) #MemeCoins (2) #Miner 盈利能力 (1) #M 洗钱 (2) #MtGox (4) #朝鲜加密货币 (1) #诺沃格拉茨预测 (1) 1TP5价格里程碑 (1) #P 价格预测 (2) 1TP5价格问题 (1) #PriceSurge (1) #PrisonSentence (1) # 量化分析 (1) #R 监管压力 (1) #SECA Anti-Crypto (1) #ShibaInu (6) #SocialBuzz (1) #T 技术分析 (1) #Toncoin (3) #T 龙卷风现金 (3) #T 龙卷风现金发展项目 (1) #T 龙卷风现金开发者 (1) #UKCrypto (1) #UpsidePotential (1) #USCongress (1) #WyomingLand (1) #XRPPrice (1) #XRPupswing (1)

实用链接

我发现了一些有用的链接，希望与大家分享。