ChainCatcher report: Solana Mobile posted on X that a malicious third-party app named “SKR Claim” was submitted to the Solana dApp Store. After gaining unauthorized access to the dApp publishing portal, the attackers modified the App Spotlight and Quests interfaces; this app prompts users to enter their seed phrases. The app was removed from the dApp Spotlight after approximately one hour and is currently being uninstalled from affected devices. The team has patched the vulnerability that allowed links to apps not fully published, and has reminded users that Solana Mobile will never request seed phrases or crypto assets, nor will it ask users to connect their wallets to claim airdrops.
Solana Mobile dApp Store malware demands mnemonic phrases
ChaincatcherShare
Summary
Solana Mobile reported a malware incident involving the dApp Store, where a malicious app named 'SKR Claim' deceived users into sharing their mnemonic phrases. Attackers exploited a vulnerability to display the app in App Spotlight for approximately one hour before it was removed. The team has patched the vulnerability and reaffirmed that Solana Mobile will never request private keys or wallet connections for airdrops. Traders monitoring altcoins to watch may consider this incident a potential short-term factor influencing the Fear & Greed Index.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.