PhishingPublished 27 Apr 2026

Phishing crypto-wallet clones in the App Store and other attacks on iOS and macOS crypto owners | Kaspersky official blog

Source Kaspersky Security Blog

Description

New waves of attacks on Apple users are leading to stolen cryptocurrency: fake crypto wallets in the App Store, trojanized legitimate macOS crypto apps, and other threats. Here’s how to stay protected.

Impact

Successful exploitation leads to theft of cryptocurrency by capturing wallet seed phrases, granting attackers full control over victims' crypto assets. The phishing apps themselves do not directly steal credentials but serve as a trust-building vector to deliver trojanized apps. The trojanized macOS apps can deceive users into revealing sensitive wallet recovery information. These attacks undermine the security assumptions of Apple devices and official app distribution channels, potentially causing significant financial loss to victims. There is no indication of broader system compromise beyond crypto wallet theft.

Defensive guidance

Users should only download crypto wallet apps from verified official sources and carefully verify app publisher details, ratings, and reviews. Never enter seed phrases into any app or website; seed phrases should only be entered directly on hardware wallets. Avoid installing configuration profiles or sideloading apps outside the App Store unless absolutely certain of their legitimacy. Do not execute untrusted commands in Terminal. Employ comprehensive security solutions to detect phishing and malware. These mitigations align with vendor guidance from Kaspersky, which emphasizes vigilance and cautious app installation practices.

References

kaspersky.com/blog/ios-macos-fake-crypto-apps/55665/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 27 Apr 2026, 16:18 UTC

References

Community reviews

Related threats