iPhone Users Warned: 26 Fake Crypto Wallet Apps Lurk in App Store

by

In the bustling theatre of modern virtue, where screens glitter like ballroom mirrors, Kaspersky has revealed a troupe of twenty-six fraudulent cryptocurrency wallet applications masquerading upon Apple’s App Store. The performance, alas, is less a soirée of security and more a carnival of disguise, designed to steal the audience’s coins with the grace of a pickpocket at a gala.

These impostors borrow the gowns and names of champions-MetaMask, Ledger, Trust Wallet, Coinbase, TokenPocket, imToken, and Bitpie-draping themselves in borrowed branding with the confidence of a dandy borrowing another’s wit. When opened, they pirouette toward phishing pages that resemble the very interface of the App Store, persuading the visitor to download a second application that is but a trojan in elegant attire, ready to drain one’s digital coffers with the nonchalant charm of a politely smiling thief.

How The Scam Works

The campaign, it seems, has been rehearsing since at least autumn of 2025, and with “moderate confidence” is linked to SparkKitty, a malware breed that knows the iOS stage as well as any tragedian knows his cue. Official versions of many of these wallets do not perform their acts in the Chinese iOS App Store; yet the false performances are not region- confined. The miscreants interpret that rule as a little joke, and thus, as one would expect in a world of grand mirrors, users beyond China may also fall prey. Apple has been apprised, which is often the first noble step in any respectable scandal.

To give the illusion of legitimacy, these counterfeit apps offer trivial amusements-games, calculators, or task managers-so the discerning eye does not instantly recoil. After installation, the performance guides the user to a counterfeit App Store page and entices them to download what appears to be the rightful wallet, while the true wallet waits backstage, lesson in ethics graven on its empty pocket book.

The installation process, much like SparkKitty’s orchestration, employs Apple’s enterprise developer tools for corporate distribution. Users are urged to install a developer profile that allows apps from beyond the App Store to alight upon their device. The attackers rely on the user’s balmy hope that such steps are mere trifles, allowing the drama to proceed and the misfortune to take its bow.

Once installed, the trojanized wallets mimic the behavior of their legitimate impersonations, courting both hot and cold wallets with the polite audacity of a suitor who believes the world owes him a kiss.

Kaspersky’s mobile malware aficionado, Sergey Puzan, contends that while the apps may not carry malignant code in themselves, they are open doors in a broader attack chain that culminates in malware installation. He cautions with the gravity of one who has seen too many masquerades:

“By paying a fee and setting up a developer account, the attackers can target any iOS device if the user succumbs to the phishing tactic. Users should be wary of the risks related to managing their crypto wallets even on devices they deem safe, such as iPhones. We expect there may be more trojanized crypto apps distributed with a similar tactic.”

Counterfeit Ledger Device

A companion page to this jesta of deception concerns a counterfeit Ledger Nano S Plus device, sold in a marketplace that loves to pose as the authentic. A Brazilian cybersecurity researcher exposed the device, which, when connected to Ledger Live, proved to be a cruel impostor. Inside, the workings betrayed themselves: a chip with markings erased, extra antennas not present on genuine devices, and firmware wherein PINs and seed phrases were left in plaintext, whispering to external servers as if to gossip with the moonlit night. All the world’s a stage, and all the devices merely players, but some players are crooks in clever costuming.

The researcher hastened to assure that this miscase does not indict Ledger’s security; it indicts the art of deception itself-the fake devices, the malicious apps, and the phishing that conspire to snatch what is not theirs to borrow. A stylish deceit, perhaps, but a deceit nonetheless, wearing silk while pocketing your purse.

Read More

2026-04-23 02:50