The threat involves a fraudulent cryptocurrency wallet app named 'Sparrow Wallet' distributed via the Apple App Store, which impersonates the legitimate desktop-only Sparrow Wallet. Victims were deceived into entering their seed phrases, enabling attackers to transfer Bitcoin to scam-controlled wallets. The legitimate Sparrow Wallet developer had previously reported these fake apps to Apple, but they remained available for over a year. Apple removed the fraudulent apps and terminated associated developer accounts only after multiple reports and public exposure. The lawsuit alleges Apple promoted the fake app in curated collections and failed to respond adequately to reports of fraud.

Victims lost significant amounts of Bitcoin, totaling approximately $1.8 million, due to theft after entering their seed phrases into the fraudulent app. The fraudulent app's presence on the App Store undermined user trust in the platform's security and app review process. The lawsuit alleges Apple’s inadequate monitoring and response contributed to these losses. There is no indication of a software vulnerability or exploit in Apple’s systems; the impact stems from social engineering and fraudulent app distribution.

Apple has removed the fraudulent applications and terminated the developer accounts responsible. Users are advised to only download Sparrow Wallet from its official website, as no legitimate iOS version exists. Apple encourages reporting suspected scams via its Report a Problem service and states it takes immediate action on guideline violations. The plaintiffs seek that Apple improve and publicly disclose its procedures for detecting and removing fraudulent apps and introduce warnings about cryptocurrency app risks. No specific software patch is applicable as this is not a software vulnerability.