Fake Cryptocurrency Apps Steal User Data

Malicious Android apps impersonating the Poloniex exchange were distributed on the Google Play Store (one with ~5,000 downloads, another with ~500) and asked for Poloniex credentials on launch; if 2FA was not enabled attackers then phished victims' Gmail accounts, obtained mailbox permissions, removed evidence, and made unauthorized transactions. The apps were subsequently removed from the Play Store and users were advised to change passwords and uninstall the apps.