OCR Crypto Stealers in Google Play and App Store

Re:OCR Crypto Stealers in Google Play and App Store by mrighele on Wednesday February 05, 2025 @05:35PM (#42956334)

> We found Android and iOS apps, some available in Google Play and the App Store, which were embedded with a malicious SDK/framework for stealing recovery phrases for crypto wallets.

Wasn't the walled garden model supposed to protect from this ?

[ Parent | on HN ]

Re:OCR Crypto Stealers in Google Play and App Store by dghlsakjg on Wednesday February 05, 2025 @06:04PM (#42956644)

Only if the guards you hire know what they are doing.

If you have ever been through the app review process, you know that it is opaque, flawed, and clearly being run by inexperienced or overworked people who just don't have time to do anything remotely resembling a security audit.

[ Parent | on HN ]

Re:OCR Crypto Stealers in Google Play and App Store by Terr_ on Wednesday February 05, 2025 @06:01PM (#42956615)

All of the fees, none of the work.

[ Parent | on HN ]

Re:OCR Crypto Stealers in Google Play and App Store by miohtama on Thursday February 06, 2025 @10:05AM (#42963038)

It's called scalable business model

[ Parent | on HN ]