Fake Skype App Steals Crypto
The world of crypto and Web3 is full of dangers, including fake apps and phishing attempts that deceive unsuspecting victims with the promise of easy money. A recent incident has revealed a user who lost their crypto after using a fake version of the popular app, Skype.
Blockchain security firm SlowMist highlighted the incident, describing how a user lost significant funds after using a fake version of Skype. The analysis indicated that the user downloaded the app from an untrustworthy source online. It was discovered that the hackers behind the fake app were the same Chinese hackers responsible for a similar fake Binance app. These hackers are notorious for targeting Web3 transactions and used a phishing strategy to steal the user’s funds.
Since Google Play is inaccessible in China, users often download apps directly from the internet, making them vulnerable to such fake apps, which are not limited to wallets and exchanges but also extend to social media platforms like Telegram, WhatsApp, and Skype.
Users Don’t Suspect Foul Play
Users tend to treat the fake Skype app as any other social app and don’t suspect foul play. After getting access, the app began uploading data to the hacker’s interface, tracking users’ message history for words related to cryptocurrencies and replacing wallet addresses with those set by the hackers themselves. The hackers managed to deposit nearly 192,856 USDT into a malicious Tron address through 110 deposit transactions.
SlowMist urged users to exercise caution when downloading apps from the internet and recommended downloading apps through official channels instead of risking downloads directly off the internet.
Fake App Analysis
SlowMist conducted an analysis of the signature information of the fake Skype app and discovered several anomalies indicating that it had been tampered with and injected with malicious code. The fake app mainly modified a commonly used Android network framework, okhttp3, to perform various malicious operations.
Hot Take: Beware of Fake Apps When Downloading from Untrusted Sources
Crypto users should exercise caution when downloading apps from untrusted sources as they could be fake and may lead to significant financial losses. Stick to official channels for downloading apps to ensure your safety and security in the crypto world.
By
By
By
By
By