26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases

Security researchers identified the FakeWallet campaign—26 malicious iOS apps (primarily visible in Apple's China App Store) that impersonate legitimate cryptocurrency wallets to phish and hook recovery phrases/private keys via trojanized wallets, browser-based phishing and OCR—and reported Apple has removed many of them; separately, Cyble disclosed MiningDropper (aka BeatBanker), a sophisticated, modular Android delivery framework that stages AES/XOR-obfuscated payloads and dynamically loads mining, RAT, banking and information-stealing components targeting users across India, Latin America, Europe and Asia.