Fake Crypto Apps

[notneeded]

These are fake apps which steal funds from user accounts. Must be removed immediately.

1. https://snapcraft.io/ledger1
2. /trezor-wallet
3. /electrum-wallet2

[ogra]

Has already happened for another set, this will be handled immediately too …

Phishing app on the snap store -- is my computer compromised?

The https://snapcraft.io/ledgerlive app is a phishing app disguising as the official app for https://www.ledger.com/ The way it works is that it queries you for your backup code (a list of words). In a dumb lapse of judgement I was scammed by this app and lost a substantial amount of money. What worries me more is that my computer/passwords/files could be compromised. But if I understand it correctly, snaps are isolated somehow? Could it have read my filesystem? What do you recommend I do?

Thanks for reporting!

[suligap]

Thank you for the report. These snaps have been removed.

[notneeded]

Great. They have been removed from the store app but they can be still reached from web site. just for your info…

[ogra]

The process for such apps involves to remove the actually malicious binaries from the archive and replace them with empty ones so users that have these apps installed get auto-refreshed to the harmless empty ones. this is why you still see them, but whatever you install as these apps is now just an empty snap.

[ogra]

Temporary suspension of automatic snap registration following security incident

On September 28, 2023, the Snap Store team was notified of a potential security incident. A number of snap users reported several recently published and potentially malicious snaps. As a consequence of these reports, the Snap Store team has immediately taken down these snaps, and they can no longer be searched or installed. Furthermore, the Snap Store team has placed a temporary manual review requirement on all new snap registrations, effectively immediately. If you try to register a new snap…