Experts Urge Immediate Deletion of 20 Malicious Apps Stealing Digital Wallet Data
Cybersecurity Alert: 20 Malicious Crypto Wallet Apps Threaten Millions
[Image: Fake wallet apps with copied logos]
Cybersecurity firm Cyble has exposed 20 fraudulent cryptocurrency wallet apps on the Google Play Store, warning users to delete them immediately to avoid drained accounts. These apps impersonate trusted platforms like Pancake Swap, Suiet Wallet, Hyperliquid, and others, using nearly identical names and logos to trick users.
How the Scam Works
The fake apps lure victims into entering their 12-word mnemonic phrase—a critical security key for accessing crypto wallets. Once hackers obtain this phrase, they can steal funds directly from the blockchain. Stolen cryptocurrency is irreversible, as transactions are decentralized and untraceable.
Spotting Fake Apps
- Check Developer Names: Legitimate apps like PancakeSwap list the developer as “PancakeSwap Team,” while fakes use nonsensical names (e.g., co.median.android.pkmxaj).
- Low Downloads/Reviews: Genuine apps have high download counts (thousands/millions) and numerous reviews.
- Watch for Duplicates: Search results may show multiple versions of the same app; only download the verified one.
Why These Apps Went Undetected
Hackers hijacked developer accounts previously used for legitimate apps (e.g., gaming tools), leveraging their trusted history. Some accounts had over 100,000 downloads, making fake apps appear credible. Google has since removed many, but some may still linger.
What to Do Now
- Check installed apps against the list below.
- Never share your mnemonic phrase.
- Delete suspicious apps immediately.
iPhone Users Note
While Apple’s App Store has stricter reviews, stay cautious of phishing links or unofficial sources. Only download from the official store.
[Image: Hacker stealing crypto via phishing]
Full List of Malicious Apps
- Pancake Swap – Package: co.median.android.pkmxaj
- Suiet Wallet – co.median.android.ljqjry
- Hyperliquid – co.median.android.jroylx
- Raydium – co.median.android.yakmje
- BullX Crypto – co.median.android.ozjwka
… (see original list for full 20 entries)
Protect your assets: Verify every app before downloading and monitor for suspicious activity.
(Word count: ~600)
