Popular Crypto Wallet Compromised, $8 Million Stolen

[ad_1]

Arman Shirinyan

The original wallet is safe to use, but you need to be careful when downloading APKs

According to the PeckShield report, popular cryptocurrency wallet BitKeep reported that several users lost their funds after contacting a compromised APK version of the app. The hackers were able to steal $8 million in assets, including over 4,000 BNB, $5.4 million USDT, approximately 200,000 DAI, and 1,233 ETH.

Directions of attack

It is not yet known where the compromised APK originated and what was the source of most of the downloads. However, some users reported being personally contacted by suspicious accounts on social media platforms like Twitter, where scammers urged them to download the BitKeep wallet.

#PeckShieldAlert #BitKeep reported that several users’ funds have been stolen, the manager said that possibly due to downloading a hacked APK version, $8 million in assets have been stolen so far, including ~$4,373 BNB, $5.4M USDT, $196,000 DAI, and $1,233.21 ETH pic.twitter.com/ZdomZGFWRO

PeckShieldAlert (@PeckShieldAlert) December 26, 2022

However, the links spread on Twitter were nothing more than phishing tools. After opening it and downloading a hacked APK file, users’ devices were compromised and crypto thieves gained access to all funds sent to addresses defined in the app.

After reaching a certain download threshold, hackers decided to “withdraw” funds to compromised wallets and did a bankrun. For now, most of the funds are concentrated in an address held by hackers.

It is important to verify the source of downloaded APKs whenever you work with cryptocurrency wallets, trading platforms, or any other application that includes payments, wallets, or any other tool that requires you to deposit funds.

If you are a BitKeep user, be sure to check the source of the APK you used to install the wallet, and if it looks suspicious, move all your funds from the wallet to another commonly used storage or hardware wallet. Alternatively, you can temporarily send funds to any trusted exchange like Binance, until you find a better way to hold the funds.

[ad_2]