A fake app in apple app store stole his life savings in bitcoin

[Trinx01]

This is sad and this story is happening because there are already a lot of users who already experienced the same things as they have lost their bitcoin from a fake crypto wallet. Not only for downloading and installing fake application a wallet can be hacked and lost your money, but there are also a lot of ways that hackers can do about it, as long as you are connected to the internet, there is still a huge possibility that you may get hacked or even scammed especially those who don't have good enough knowledge about scamming and hacking.

Google and Apple should take an action for this thing, I don't even know how the dake application enters a google play store.

[1715411756]

1715411756

[1715411756]

1715411756

[1715411756]

1715411756

[Lucius]

Summary:  fake apps in google & apple app stores are stealing cryptocurrency.

This case is interesting in that I have not seen it receive much attention in terms of what approved safe methods of handling crypto are. Common rule of thumb is having sole access to private key. Not using browser wallets. But there is almost nothing said about avoiding 3rd party apps or browser plug ins which are sometimes known to be utilized to steal crypto.

Is this something new that we should be surprised about here on the forum? Well, anyone who thinks with their head knows that every app store (on any platform) is a source of malicious applications that are accepted as legitimate, but later their owners make modifications that make them malicious. Furthermore, we could say that those who look for trouble will find it in one way or another.

Situations like this only prove that the weakest link in the safety chain is a man who, thanks to his ignorance, does things which are completely irrational. Even if someone downloads an app that is fake, how stupid is it to believe that your seed needs to be put into it? It is a basic ignorance that is widespread in the crypto community and for which any malicious person can profit today.

But Christodoulou is angrier at Apple than at the thieves themselves: He says Apple marketed the App Store as a safe and trusted place, where each app is reviewed before it is allowed in the store.

It confirms everything I have already written above, because how to call a man who has 17 BTC and does not know how important it is not to share the seed with anyone. Part of the blame is certainly on Apple and Google in situations like this, but the biggest is on users who haven’t learned even the most basic thing to protect themselves.

[goldade]

Stories of people losing your coins by downloading fake apps is becoming rampant and this shows that quite a lot of people are being affected by this. This is a proof that these scammers will stop at nothing to show that they can actually rip one off his hard earned money.
I think Google playstore and Apple app store should look into this. How did these fake apps get into the store in the first place? One should have some level of assurance by downloading apps from the store and not just from the web.
I should feel secured downloading from the store and not afraid that I might be scammed by downloading a fake app

[Renampun]

is not the supervision of the application at apple, very strict?
scammers are really unsettling and this time they were able to get into the list of apps in the apple store, what a surprise. Apple seems must be able to provide an answer to their negligence.

[naomi-the-cat]

People still believe in fishing apps and sites. Some things never changes after all this time...

[mk4]

Is this something new that we should be surprised about here on the forum? Well, anyone who thinks with their head knows that every app store (on any platform) is a source of malicious applications that are accepted as legitimate, but later their owners make modifications that make them malicious. Furthermore, we could say that those who look for trouble will find it in one way or another.

While fake apps aren't really anything new to us, there's actually something slightly different in this specific case— the fact that this scam app is on the Apple App Store. Most of such cases far mostly(probably even 99%) occur on the Android Play Store.

[Rana590]

For this reason we have to be more careful about downloading any app from google play store or apple store. Besides, google and apple should take necessary steps to remove this kind of fake app. We should remember that our asset is more important than an app.

[Theb]

Apple would not name the developer of the fake Trezor app or provide the developer’s contact information. Apple wouldn’t say whether it was turning over the name to law enforcement or whether it investigated the developer further. Apple also wouldn’t say whether that developer had developed any other apps in the past or had connections to other developer accounts under different names.

WTF kind of PR response is this? A total of 1.6$ Million have been stolen through a fake app they have on their own app store and they aren't showing any kind of action for letting a fake Trezor app be available for download? Seriously a lot of people are too comfortable downloading things straight without looking for reviews and the rating as they trust both Google and Apple to have screened everything yet there is still a bunch of scams and fake apps popping around their app stores, the sad thing about here is both companies don't respond to their own users who got victimized by these fake apps. That's why if I am downloading apps I don't search it on the app store but go to the developer's website and click their app's link in their just for the peace of my mind.

[bL4nkcode]

This is very unfortunate, with those amount I should be somewhat knowledgeable already by what kind of app/security measures should I use/apply to my device(s) especially if I'm storing those wealth in my phone or even on a computer or hardware wallet.

[eaLiTy]

This is very unfortunate, with those amount I should be somewhat knowledgeable already by what kind of app/security measures should I use/apply to my device(s) especially if I'm storing those wealth in my phone or even on a computer or hardware wallet.

Even with all the precautions the world if we install a phishing software or an application we mess up everything and this is the sole reason using phone to store any of your valuables is the best option and i would advice anyone from doing these blunders. It is unfortunate that someone would loose everything just because they installed some application in the apple store and they need to take responsibility for including phishing applications in their store while they take actions against some applications immediately for minor infractions.

[ReiMomo]

For this reason we have to be more careful about downloading any app from google play store or apple store. Besides, google and apple should take necessary steps to remove this kind of fake app. We should remember that our asset is more important than an app.

They will remove but once they receive a huge number of reports but if not, they won't do it.
I heard so many issues like these but both big companies did not take action as long as they receive money from the advertiser they will still publish this even though it is a phishing link or scam website.

Always double-check or even triple-check once had a transaction or if there is a visit that not commonly we visit.

[Hamphser]

Common stuff that you would really experienced if you are a fan of downloading something without taking any precaution or being too careless on installing things came online.

You know that you do have something important on your mobile or pc then you should be at least aware that downloading something neither can be safe or bad thats why further in depth
analysis would really be needed.You should make at least yourself a little bit paranoid when it comes to these kind of probabilities and that will surely save you up.

This isnt something new about phishing and malware issues.Once you do get to a point where you are being too careless then that would most likely will happen to you.

[amishmanish]

While installing an app from a store is common-place. Don't such applications ask or atleast mention the permissions that the user have to give to the app. I haven't used an Iphone but it apps on android specify the permissions they are asking for.
Even though it is hard to keep track of these, Isn't it obvious that those who allow apps to be whitelisted or hosted on the platform would atleast match the behavior of app in reality in comparison to what it claims to have access for the first time.

Somebody better versed in app development and security should comment on this? If its a cryptocurrency app, the only permission it should probably have is to use the camera for scanning address QR codes.

[Peanutswar]

Nothing new this is why we have Scam Accusations boards and more to keep awareness to the other member also to the people about the fake application this is the reason why other people give a bad image to the bitcoin or in other coins because of that application which is not a legit or reliable only thing they do is to scam mostly the beginners. To make sure it's safe it's better to research the application and double-check if this is the legit one else report immediately so google or another app store will remove this app. Also, check the developer if the same as the original. AFAIK Apple has better application security than the other brands because they focus on the security for their users.

[michellee]

It seems the apple app store can not check details for every app available on their store because there are thousands of more apps that are ready to download by the user. That will be the same as the google playstore, which has thousands of apps on their store. That will be the user responsible for always checking the validity of the apps before they download and install them on their mobile phone. Please make sure that you check on the official's website and ask if you are suspicious about the apps before you download because you do not know if that app is safe for your mobile phone or the app contains a virus or malware or something like that.

[Anonylz]

Nothing new this is why we have Scam Accusations boards and more to keep awareness to the other member also to the people about the fake application this is the reason why other people give a bad image to the bitcoin or in other coins because of that application which is not a legit or reliable only thing they do is to scam mostly the beginners. To make sure it's safe it's better to research the application and double-check if this is the legit one else report immediately so google or another app store will remove this app. Also, check the developer if the same as the original. AFAIK Apple has better application security than the other brands because they focus on the security for their users.

Yeah but the op or whoever was the victim can't exactly accused anyone since this an app he/she installed on his own accord,
Perhaps he can accuse the dev of the app or Apple for negligence and allowing fake app to be listed on the App store, I doubt if this will generate a positive feedback,
I would believe that downloading an app from any App store should be a lot more secured than downloading from online, this apps should have gone through the necessary security checks before approval to be listed on the App store,  but somehow fake apps still manage to find their way in, very sad.

[mamesso]

This is very sad. Truth is, it can happen to anyone. Sometimes we may be confident that we know it, yet, there's still that chance of being scammed directly or indirectly. I just hope less - no one fall for these scammers.

Anyone would not want to fall victim to a fraud like Christodoulou, ironically the fake Trezor application can bypass Apple systems which are known to be very strong for their security. We'll never know the trap they set, they will always be looking for ways to make their victims suffer.
Christodoulou misfortune will be a valuable experience for all of us to be even more careful when accessing wallets in applications that we have never used before.

[Psynthax]

and its actually takes shit ton of effort to get normal app that's not phishing or scam into the app store, apple must be joking. if any, he deserves to sue apple because if not for their app filtering method that's kinda broken he won't lose all the money.

People still believe in fishing apps and sites. Some things never changes after all this time...

differentiating nowadays' phishing apps isn't as easy as comparing an apple to orange, sometimes the phising app is very identical to the real app, and in this case the app coming from the app store where it's said to be filtered strictly by apple.

[blckhawk]

Sad but true, I guess this was inevitable and we cannot get rid of these kinds of applications unless there will be someone who will report the fake application. It may be fault of downloading the platform because they cannot able to scrutinize each and every application registered on their platform but I can't blame them as well due to the fact it would hard to manage their numerous application. However, I also believe that it was the user's fault as well because they must have checked the app first before downloading it. My advice is that when are looking for a mobile version application, it is better to check out their official website because usually, they have a link that will direct you to their official mobile application like Binance for example.

[Lucius]

While fake apps aren't really anything new to us, there's actually something slightly different in this specific case— the fact that this scam app is on the Apple App Store. Most of such cases far mostly(probably even 99%) occur on the Android Play Store.

Of course, Android as an OS is far more exposed to malicious applications because almost 72% of smartphones have it - so it makes sense to constantly hear about fake apps in Google Play Store. But that doesn't mean they're not in the Apple Apps Store and that their verification system is any better and more efficient in that regard.

Even if the human factor is involved in checking all apps (and we know that algorithms do this), the one checking should know what it is about - the app in question does not have any malicious code, but only tries to trick the user into entering their seed - you and I would never fall for such a trick, right?

As for the Apple App Store, I believe everyone should read the following article which shows what one of the iOS developers thinks about this topic.

Apple’s App Store is hosting multimillion-dollar scams, says this iOS developer