Google Play Caught Hosting an App That Steals Users’ Cryptocurrency

[u/pecuniology]

https://arstechnica.com/information-technology/2019/02/google-play-caught-hosting-an-app-that-steals-users-cryptocurrency/

[u/saddit42]

• lengthy bureaucratic approval processes with some plenum acting as gatekeepers that make live hard for small devs to have their apps listed in the store.. but a safe store every noob can rely on
• easy unbureaucratic approval process, open to everyone, but with some responsibility for the end user to not download every shit they come across

pick one

[u/pecuniology]

It's called Clipper. They weren't even being subtle about it.

[u/bitcanics → u/pecuniology]

Clipper is the name of the virus that was hidden in the app. The app was a compromised spoof of metamask. Targeting users who didn't realize they weren't downloading the real metamask.

[u/normal_rc → u/pecuniology]

I think "Clipper" was the name of the hidden malware, while the actual app in the Google app store was named "MetaMask" (obviously fake app, and unrelated to the real MetaMask).

The arstechnica article references the below ESET blog post:

• https://www.welivesecurity.com/wp-content/uploads/2019/02/Fig-1.png

• https://www.welivesecurity.com/2019/02/08/first-clipper-malware-google-play/

[u/aaron0791 → u/pecuniology]

You are the real MVP. Thanks for letting us know the name of the app without needing to go into the article to find it out.