Malicious Airdrop App Slips Into Official Crypto Store, Targets Wallet Recovery Phrases

TL;DR: Cybersecurity researchers identified a fraudulent app simulating token airdrop distributions within an official application catalog. The malicious software required the manual entry of 12- or 24-word seed phrases as a mandatory requirement to process alleged reward claims. Technical reports confirmed that the cryptographic credentials were transmitted directly to remote servers controlled by the attackers. Another security breach was reported this Monday, November 2, when a malicious airdrop app infiltrated an official software repository, deploying a structured mechanism to siphon cryptocurrency wallet recovery phrases. The incident, reported by digital forensics firms, triggered technical alarms across multiple platforms after the direct exposure of affected users’ digital assets was confirmed. Today a malicious third party app named “SKR Claim” was submitted to the Solana dApp Store.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Economy.