Trezor Mobile Wallet and Coin Wallet: The rise in the value of Bitcoin in recent weeks has led to a surge in malicious cryptocurrency-related apps. The Google Play Store is seeing a rise in apps programmed to steal coins from users.
ESET has already found two such applications. One of them is the Trezor Mobile Wallet, disguised as the legitimate Trezor wallet.
Initially, researchers concluded that Trezor users were not affected. But the Trezor Mobile Wallet is linked to another app called Coin Wallet, and that, apparently, is also a scam.
Therefore, the fake Trezor app proves to be a gateway for malicious activity. ESET also added that the fake app appears second in search results, behind the legitimate app.
On the Google Play Store, the Mobile Trezor Wallet displays images that are identical to the original app. By presenting it with a similar appearance, users can be more easily fooled.
Once you install the app, the danger begins!
Once the malicious application is installed, the user is redirected to a registration and login screen. This screen is used for phishing, i.e. to collect user data and, more generally, for illegal purposes. Everything entered is sent to the criminals' servers.
The Coin Wallet app is even more harmful because it collects the user's crypto-coins. Instead of transferring the funds to the virtual wallet, they are transferred to the hackers' wallet.
ESET's research also revealed that these apps were made with online templates that can be purchased for 30 or 40 euros. Hackers can then change the templates to attract users.
The Trezor Mobile Wallet and Coin Wallet appear to have been removed from the Google Play Store. However, the time they were active may have been enough to gather data or steal crypto-coins from victims.
