Victims lose $70k to one single wallet-draining app on Google's Play Store

Check Point Research uncovered a WalletConnect-branded fraudulent Android app on Google Play that posed as an official helper for wallet connection issues, lured users into linking their crypto wallets, redirected victims to a malicious website to capture wallet and blockchain details, and exploited smart-contract mechanics to prioritize and transfer valuable tokens to attacker-controlled addresses; the campaign resulted in roughly 150 compromised addresses and approximately $70,000 stolen before Google removed the app after five months.