App demanding wallet recovery phrase appears in Solana Mobile official store
An attacker who gained unauthorised access to Solana Mobile's app publishing portal altered the official store's featured screen to show a fake SKR Claim app. The app demanded wallet recovery phrases and was removed after about an hour. The company fixed the related flaw and did not disclose the number of installs or the scale of asset losses.
Key facts
- Affected organisation
- Solana Mobile
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Malicious app shown in the official store's featured area for about an hour; number of installs and scale of asset losses not disclosed
- Cause / method
- Unauthorised access to the app publishing portal and tampering with the featured screen to induce entry of wallet recovery phrases
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The fake SKR Claim app demanding wallet recovery phrases was removed after about an hour in the official store's featured area, and the related flaw was fixed.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.