Google Play Store becomes a minefield with crypto scam apps
Further to the news highlighting a fake Uniswap application on Google Play Store has yielded at least $20,000 into the pockets of scammers, there are increasing reports of new fake popular applications attempting to scam people out of their private keys, resulting in loss of funds. The latest report comes from Trezor the company well known in the crypto world for its hardware wallets, warning users in a tweet as it came to their attention that there currently exists a fake Trezor Wallet application on Google Play Store. https://www.publish0x.com/ircrp/beware-of-fake-uniswap-applications-xpjdzmv?a=M7e5yEPRe2&tid=rc https://twitter.com/Trezor/status/1334106537271373824
Source: *twitter* https://twitter.com/Trezor/status/1334106537271373824 The application was released to the store just two weeks ago (18 November 2020) and has started accumulating fake reviews after a week, now becoming a top search result with intents and design to steal the victims backup key, commonly known as seed phrase or private key. Upon installing the application the user is presented with Trezor alike themed content and the first app interaction prompting the user to insert the backup key which is then sent over to a remote server.
*Source: Trezor Wallet Scam app* Similarly to the fake Uniswap application the Trezor Wallet application appears to be positioned very high in the search ranks, with a simple search of "trezor" term returning the scam app on the third position with only advertised applications preceding it. https://www.publish0x.com/ircrp/beware-of-fake-uniswap-applications-xpjdzmv?a=M7e5yEPRe2&tid=rc
*Source: Google Play Store* The problem appears to be with the ease of the scammers jumping from one fake app onto another by simply rebranding to the app themes & logos and repeating relatively easy process of inflating the app store reviews, then just waiting for the victims to install the app and insert their private keys. **Related Reading** Beware of fake Uniswap applications https://www.publish0x.com/ircrp/beware-of-fake-uniswap-applications-xpjdzmv?a=M7e5yEPRe2&tid=rr Scam Alert: Ledger SMS https://www.publish0x.com/ircrp/scam-alert-ledger-sms-xgderne?a=M7e5yEPRe2&tid=rr Ledger phishing emails https://www.publish0x.com/ircrp/ledger-phishing-emails-xllmyoz?a=M7e5yEPRe2&tid=rr Wall Street Trading Firm is accumulating Bitcoins & Alts https://www.publish0x.com/ircrp/wall-street-trading-firm-is-accumulating-bitcoins-and-alts-xkkopkg?a=M7e5yEPRe2&tid=rr Binance will reward XRP holders with Spark tokens https://www.publish0x.com/ircrp/binance-will-reward-xrp-holders-with-spark-tokens-xejqdxp?a=M7e5yEPRe2&tid=rr Etherum Classic new mining algorithm to the rescue of its network https://www.publish0x.com/ircrp/etherum-classic-new-mining-algorithm-to-the-rescue-of-its-ne-xlloogl?a=M7e5yEPRe2&tid=rr Binance begins a legal action over Forbes defamantion of its business https://www.publish0x.com/ircrp/binance-begins-a-legal-action-over-forbes-defamantion-of-its-xpjdjdz?a=M7e5yEPRe2&tid=rr Uniswap site was down because of dependency on Cloudflare, is this really a big problem ? https://www.publish0x.com/ircrp/uniswap-site-was-down-because-of-dependency-on-cloudflare-is-xzyovjp Critical Etherum services go down for couple of hours https://www.publish0x.com/ircrp/critical-etherum-services-go-down-for-couple-of-hours-xnlryrd?a=M7e5yEPRe2&tid=rr **Ongoing crypto free earn campaigns:** Earn daily through publish0x by tipping & posting, lbry.tv by watching video & media content and presearch for a non intrusive search engine https://www.publish0x.com/register?a=M7e5yEPRe2&tid=reg https://lbry.tv/$/invite/@ircrp:3 https://presearch.org/signup?rid=1909039 Honeygain & Theta Edge for passive gains through participating in content delivery networks https://r.honeygain.me/IRCRP91E5D https://medium.com/paradigm-fund/theta-network-edge-node-the-latest-evolution-of-the-edge-cacher-released-theta-hackathon-d0b00169f29b **Other crypto gateways:** Most popular & rewarding exchanges currently include Swissborg, Binance, Coinbase, Celsius & Crypto.com https://join.swissborg.com/r/adrianGE53 https://www.binance.com/en/register?ref=IJB21ZRR https://coinbase.com/earn/xlm/invite/73nm6rgz https://celsiusnetwork.app.link/163140cbc1 https://crypto.com/app/msagh7w9qq For industry standard secure hardware wallets consider using Ledger or Trezor to keep your funds safe. http://ledger.refr.cc/ircrp1 https://trezor.io/#comparison This article was originally published on publish0x
1 comment
It's sad how easy for them to set up new scam replacement, and the stronger restrictions put on those people will prevent good app makers from publishing their good apps. The only solution we have now is to educate! I already posted something about this before~