Snap Store Crypto Wallet Hijacking Exposes User Assets

Linux users face a new threat as cyber attackers exploit the Snap Store by hijacking domains to disguise malicious apps as trusted crypto wallets, announced by SlowMist’s CISO 23pds.

This attack on user trust underscores the need for vigilance, as compromised apps resemble genuine wallets, exploiting established trust and leading to significant losses.

Hijacked Domains Deployed Fake Crypto Wallets

Attackers hijacked domains on the Snap Store to distribute tampered apps posing as trusted crypto wallets. The attack commenced following the takeover of storewise.tech and vagueentertainment.com, compromising user wallets. 23pds and Alan Pope highlighted these vulnerabilities, urging vigilance among developers and users.

Users have faced severe financial implications, with losses such as $490,000 reported after using these tampered applications. Alan Pope warns users to avoid installing crypto wallets from app stores altogether, pointing out a Croatian group as likely culprits. The developer community calls for heightened caution.

23pds, Chief Information Security Officer, SlowMist, posted on social media about the hijacked domains: “In these attacks, the perpetrators monitor expired developer domains, register them, reset Snap Store passwords, and inject malicious code into trusted apps.” source

Rising Threats in Crypto Repositories

Did you know? The hijacking of expired domains has become a common tactic for cybercriminals to exploit user trust in established applications.

Bitcoin (BTC) trades at $89,342.24 with a market cap of $1.78 trillion, experiencing a 3.16% decline in 24 hours, according to CoinMarketCap. Despite significant dips, the 60-day change shows a 6.56% increase, reflecting volatility with BTC’s market dominance at 59.19%.

Coincu’s research suggests increased regulatory actions could enhance security measures across crypto platforms. As attacks grow more sophisticated, ongoing vigilance and robust security practices are essential for ecosystem stability. Crypto mixing services have been targeted to prevent illicit activities, aligning with efforts to protect user assets.