Unattributed: Credential compromise

TL;DR: Cybersecurity researchers identified a fraudulent app simulating token airdrop distributions within an official application catalog. The malicious software required the manual entry of 12- or 24-word seed phrases as a mandatory requirement to process alleged reward claims. Technical reports confirmed that the cryptographic credentials were transmitted directly to remote servers controlled by the attackers. ... Read more

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://crypto-economy.com/malicious-airdrop-app-slips-into-official-crypto-store-targets-wallet-recovery-phrases/

Record history

First seen: 2026-11-02T20:46:23.000Z. Last updated: 2026-11-02T23:52:05.401Z. Revision: 1.