{"id":43214,"date":"2019-05-24T05:30:42","date_gmt":"2019-05-24T03:30:42","guid":{"rendered":"https:\/\/ethereumworldnews.com\/?p=43214"},"modified":"2019-06-11T11:34:36","modified_gmt":"2019-06-11T09:34:36","slug":"fake-trezor-app-phishing-playstore","status":"publish","type":"post","link":"https:\/\/ethereumworldnews.com\/fake-trezor-app-phishing-playstore\/","title":{"rendered":"Careful! Fake Trezor Wallet Appears on the Google PlayStore"},"content":{"rendered":"\n<p>The world of cryptocurrencies is growing at a quick pace,\nthe marketcap increase and hype of the community have attracted a growing\nnumber of investors who are sure that the 2017 Bullrun is not a one-of-its-kind\nevent but can happen again.<\/p>\n\n\n\n<p>However, not everything is good news in the crypto-verse, and just as many honest investors have jumped on the blockchain technologies train, the possibility of making easy money with crypto has also attracted some criminals.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The First Suspicions Appeared on Reddit<\/h3>\n\n\n\n<p>Recently, the arrival of\u00a0an App in the Google Play Store raised users\u2019 suspicions. Apparently, someone wanted to take advantage of the fame of the Trezor wallet hardware to perform a Phishing attack.<\/p>\n\n\n\n<p>Reddit user mooncritic posted the message a little over a\nweek ago, but this went unnoticed for a few days:<\/p>\n\n\n\n<figure class=\"wp-block-embed-reddit wp-block-embed is-type-rich is-provider-reddit\"><div class=\"wp-block-embed__wrapper\">\n    <blockquote class=\"reddit-card\" >      <a href=\"https:\/\/www.reddit.com\/r\/TREZOR\/comments\/bnqhfi\/is_the_android_app_trezor_mobile_wallet_fake\/?ref_source=embed&amp;ref=share\" rel=\"nofollow noopener\" target=\"_blank\">Is the Android app &quot;Trezor Mobile Wallet&quot; fake?<\/a> from      <a href=\"https:\/\/www.reddit.com\/r\/TREZOR\/\" rel=\"nofollow noopener\" target=\"_blank\">TREZOR<\/a>    <\/blockquote>    <script async src=\"https:\/\/embed.redditmedia.com\/widgets\/platform.js\" charset=\"UTF-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>Although Google banned the app, at least 50 people downloaded the fraudulent \u201cTrezor Mobile Wallet\u201d but so far there have been no reports or complaints from users who have lost their funds (and the wallet addresses handled by the scammers show that there is nothing to worry about).<\/p>\n\n\n\n<p>The first flag that raised suspicion was that the apk\ndeveloper was not SatoshiLabs, and all developments associated with the brand\nare handled by this firm.&nbsp;<\/p>\n\n\n\n<p>Reddit user d9c3l audited the apk source code, and shared\nthat the \u201ccompany\u201d responsible for the app was \u201ccoinwalletinc(dot)com\u201d.<\/p>\n\n\n\n<p>The apk used a design similar to the Trezor software in an attempt&nbsp;to trick users into creating a manipulable wallet with an address owned by the scammers.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" width=\"682\" height=\"759\" src=\"https:\/\/ethereumworldnews.com\/wp-content\/uploads\/2019\/05\/TREZOR.png\" alt=\"Interface of the Fake Trezor Wallet App\" class=\"wp-image-43216\" title=\"\" srcset=\"https:\/\/ethereumworldnews.com\/wp-content\/uploads\/2019\/05\/TREZOR.png 682w, https:\/\/ethereumworldnews.com\/wp-content\/uploads\/2019\/05\/TREZOR-270x300.png 270w\" sizes=\"(max-width: 682px) 100vw, 682px\" \/><\/figure>\n\n\n\n<p>Of course, Coinwalletinc\u2019s website shows a blank page and the name of the person who registered the domain <a rel=\"noreferrer noopener nofollow\" aria-label=\"cannot be obtained (opens in a new tab)\" href=\"https:\/\/whois.icann.org\/es\/lookup?name=coinwalletinc.com\" target=\"_blank\">cannot be obtained<\/a> as they licensed it to NameCheap, Inc for confidentiality reasons.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Not the First Time<\/h3>\n\n\n\n<p>This is not the first time hackers and scammers have attempted phishing attacks against wallets. A few months ago, the famous multi-currency wallet <a href=\"https:\/\/ethereumworldnews.com\/fake-jaxx-phishing-website-shut-down\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"JAXX (opens in a new tab)\">JAXX<\/a> suffered a phishing attack in which users trying to restore their wallets sent their data to a group of scammers.<\/p>\n\n\n\n<p>The same thing happened more elaborately with Uphold,\nhowever in this case the scammers used the official email address of the firm,\nso it is presumed that there was an inside job.<\/p>\n\n\n\n<p>Other wallet that use their own nodes (such as Electrum) have also suffered <a rel=\"noreferrer noopener\" aria-label=\"attacks (opens in a new tab)\" href=\"https:\/\/ethereumworldnews.com\/bitcoin-electrum-attacked-hacker-steals-btc\/\" target=\"_blank\">attacks<\/a>, forcing to connect to a false node sending confidential information.<\/p>\n\n\n\n<p>The best protection against this type of attacks is keep your funds offline, either on a paper wallet or using hardware devices. Also, make sure to have the most updated version of a reputable wallet, and double check that the software is being offered by a trusted developer<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The world of cryptocurrencies is growing at a quick pace, the marketcap increase and hype of the community have attracted a growing number of investors who are sure that the 2017 Bullrun is not a one-of-its-kind event but can happen again. However, not everything is good news in the crypto-verse, and just as many honest investors have jumped on the blockchain technologies train, the possibility of making easy money with crypto has also attracted some criminals. The First Suspicions Appeared [&hellip;]<\/p>\n","protected":false},"author":26,"featured_media":25522,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[828],"tags":[1076,425,131,135],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/43214"}],"collection":[{"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=43214"}],"version-history":[{"count":0,"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/43214\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/media\/25522"}],"wp:attachment":[{"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=43214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=43214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=43214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}