[MadScientist]

Jeez watch out all you guys on apple devices, yet another malicious app :(

A malicious Ledger Live app for macOS available from Apple’s App Store has drained approximately $9.5 million in cryptocurrency from 50 victims in just a few days this month.

Users who downloaded the fake Ledger app were tricked into entering their seed/recovery phrases, thus giving attackers full access to their wallets and allowing them to send digital assets to external addresses under their control.

According to blockchain investigator ZachXBT, the attackers used several wallet addresses to receive funds across multiple chains, including Bitcoin, Ethereum, Tron, Solana, and Ripple.

The stolen amounts were then laundered through more than 150 deposit addresses on KuCoin, linked to a centralized mixing service called “AudiA6,” which launders crypto in exchange for high fees.


Source - https://www.bleepingcomputer.com/news/se...in-crypto/

[Wake]

That's insane, that's the trust some people put into apps pretty much gave there wallets away.

[InspectorGadget]

"hmmmm do I download the app that has 3 reviews and 3000 downloads or do I choose the app with 50000 reviews and 15000000 downloads? Hard choice!"

[MadScientist]

That's insane, that's the trust some people put into apps pretty much gave there wallets away.

The craziest part is the nearly $10,000,000 came from only 50 people 🤯

[I ɴ ᴄ ʀ ᴇ ᴅ ɪ ʙ ʟ E]

Ledger Live Wallet? Pretty sure Apple is accountable here at par.

Rip users :/

[Wake]

The craziest part is the nearly $10,000,000 came from only 50 people 🤯

They must have been lining certain users wallets up for a while. Sad to see but kind of user error just shows how much faith some people have in apps, worrying that the app would have gone through multiple reviews and security checks and this still managed to slip through.

[Edmond Dantes]

The craziest part is the nearly $10,000,000 came from only 50 people 🤯

This is approximately $200k per person trusting a random app with no reviews. Make me question things.

[psickophant]

Interesting. There is surely more to the story. Maybe the likes of antivirus propagating malware. Thanks for sharing.

[G Reviews]

This is a concerning example of how sophisticated crypto attacks have become, even on supposedly vetted platforms like the App Store. What's particularly troubling is how the attackers managed to create a convincing enough replica to bypass Apple's review process, highlighting a critical vulnerability in their security checks. For those in crypto security, this incident emphasizes the importance of never entering seed phrases into any app, regardless of its apparent legitimacy or platform endorsement.

[KtDan]

This is insane