Apple just removed a fake cryptocurrency application from the Mac App Store after users lost a combined 9.5 million dollars. The scam program stayed live on the platform for nearly two weeks before anyone noticed the problem. Over fifty people downloaded the application and entered private seed phrases into the system.
This mistake gave hackers direct access to the money, with three individuals losing over a million dollars each.
The counterfeit app perfectly copied a real digital wallet
The counterfeit software was designed to look exactly like the real Ledger Live wallet. The actual company only lets people download its program directly from its website, rather than using the store.
The fraudulent app tricked victims by asking for secret recovery words. Legitimate services never ask for this information. Once users typed in those details, attackers moved the stolen funds through an exchange called KuCoin. The thieves then used a mixing service to hide where the money went.
Investigators hint at potential legal trouble for the company
An investigator known as ZachXBT uncovered the massive theft and shared the findings online. He pointed out that the tech giant might face a large class-action lawsuit. This situation happened because it allowed the scam program to pass the strict review process.
The platform promises a safe environment, but this oversight caused massive financial damage. The company has not yet explained how the malicious software slipped through its security checks. It also pulled another popular app recently that was secretly collecting sensitive user data for advertisers.
