NewMalicious App · App StoreFakeWallet: 26 App Store apps led users to fake crypto wallets
At a glance
- Apps
- At least 26
- Disguise
- Games, calculators, to-do lists
- Faked wallets
- MetaMask, Coinbase, Ledger…
- Reported by
- Kaspersky
What happened
Kaspersky found at least 26 App Store apps disguised as games, calculators and to-do lists. Once opened, they showed a page imitating the App Store and pushed users to install a developer profile, which then sideloaded trojanized copies of well-known wallets.
Most of the apps were visible only in mainland China, but nothing in them limited where they worked.
What was found
The fakes imitated MetaMask, Coinbase, Trust Wallet, Ledger, TokenPocket, imToken and Bitpie. Hot-wallet versions intercepted seed phrases, and cold-wallet users were phished for theirs. The campaign has run since at least fall 2025; Kaspersky reported the apps to Apple and links them, with moderate confidence, to the group behind SparkKitty.
Data at risk
- Seed phrases
- Crypto wallet funds
What you should do
- Download wallets only through the official link on the wallet's own website, not from App Store search alone.
- Be wary whenever an app asks you to install a profile.
- Never enter a seed phrase in a wallet you cannot confirm is genuine.
View original postKasperskySource: Kaspersky