New Delhi: Cybersecurity warnings have been issued after over 20 malicious applications on the Google Play Store were discovered posing as legitimate cryptocurrency wallets, with the goal of stealing sensitive personal data from Android smartphone users.
The alert comes from Cyber Research and Intelligence Labs, which identified a coordinated phishing campaign using counterfeit crypto wallet apps to collect wallet recovery phrases from unsuspecting users.
Disguised under names such as SushiSwap, PancakeSwap, Suite Wallet, and Raydium, these applications mimic the interface and features of authentic decentralised finance platforms. Once installed, they prompt users to input their 12-word seed phrase, which is critical for accessing crypto funds. These details are transmitted to threat actors, compromising the user’s digital assets.
The distribution tactic involves uploading these harmful apps under the developer identified previously associated with video editing and gaming utilities. The phishing links are concealed within the app’s privacy policies, leading users to believe the request for credentials is legitimate. According to CRIL, this method will enhance the app’s credibility and reduce user suspicion.
These are some high-risk apps to uninstall immediately
- Suiet Wallet
- SushiSwap
- Raydium
- PancakeSwap
- Hyperliquid
- BullX Crypto
- Meteora Exchange
- OpenOcean Exchange
- Harvest Finance Blog
Installing any of these applications may result in the permanent loss of digital assets due to unauthorized transactions. CRIL advises the public to follow these precautions to avoid falling victim to similar attacks.
Refrain from installing lesser-known or unofficial crypto apps. Never input wallet recovery phrases unless using a verified and trusted platform. Check developer credentials and user feedback before downloading applications. As cryptocurrency adoption grows, so does the sophistication of cyber threats. Experts stress that users’ vigilance and caution in using applications remain the best defence.
