Kaspersky flags 26 fake wallet apps on iOS App Store mimicking MetaMask, Ledger, and Trust Wallet — Apple removes all

Kaspersky identified 26 fraudulent wallet apps on Apple's App Store impersonating MetaMask, Ledger, Trust Wallet, Coinbase, TokenPocket, imToken, and Bitpie — dubbed FakeWallet and linked with moderate confidence to the SparkKitty operation active since fall 2025. Trojanized apps intercept mnemonic phrases during wallet setup, encrypt them with RSA+Base64, and exfiltrate to attacker infrastructure. The campaign primarily targeted Chinese iOS users, but the payload has no regional restrictions so victims elsewhere are also exposed. Apple has pulled all 26 apps following Kaspersky's responsible disclosure.

TLDR by @Benthic

More coverage

• Kaspersky finds 26 fake crypto wallet apps on Apple's App Store that ... (kaspersky.com)
• 26 FakeWallet Apps Found on Apple App Store Targeting Crypto ... (thehackernews.com)
• Fraudulent apps on Apple's App Store -Kaspersky Daily (kaspersky.com)
• VPN & Security by Kaspersky - App Store - Apple (apps.apple.com)

Explore the topic

• iOS
• Trust Wallet
• Ledger
• Wallet