Blockchain security firm SlowMist revealed a new phishing attack involving a fake Skype app to steal crypto funds from an unsuspecting victim. The victim contacted SlowMist directly, explaining that his funds were stolen after downloading what he thought was the Skype app from the internet. The scam underscores the vulnerability users face, especially in regions like China, where direct downloads are a substitute for unavailable official app stores, SlowMist said in its report.
“Due to the inaccessibility of Google Play in China, many users often resort to searching for and downloading apps directly from the internet,” SlowMist wrote. “However, the types of fake apps available online are not limited to just wallets and exchanges. Social media applications like Telegram, WhatsApp and Skype are also heavily targeted.” SlowMist’s subsequent investigation revealed several red flags, with the app's certificate effective date hinting it was newly created in September and signature information pointing toward Chinese origi