A New Linux Threat Is Targeting Crypto Wallet Users

[bonk]

Blockchain security firm SlowMist has uncovered a new Linux-based attack vector that targets crypto users through trusted software channels. The attack abuses applications distributed via the Snap Store, tricking users into handing over their wallet recovery seed phrases under the guise of legitimate updates.

The malicious apps impersonate well-known wallets such as Exodus, Ledger Live, and Trust Wallet. Once installed, they prompt users to enter recovery phrases, allowing attackers to quietly drain funds — often without immediate signs that anything went wrong.

[chainsniff]

this is lowkey terrifying because it’s not some sketchy download, it’s literally a “trusted update”