Security experts claim to have uncovered the first “cryptrom” fraudulent application to successfully bypass Apple’s stringent App Store review process.
Two apps in question, Ace Pro and MBM_BitScan, were also found on Google Play. What alerts users, however, is their presence in the App Store, which is usually governed by stricter security protocols.
The app is also immune to Apple’s lockdown mode, which is designed to protect users from advanced social engineering, Sophos said.
“In general, it is difficult for malware to get past the Apple App Store security review process. Before, I had to convince the user to install the configuration profile first.”
“There is clearly an added level of social engineering to this, a level that is difficult to overcome. is “warned” that is incorrect. By placing the application on the App Store, scammers have significantly increased the potential victim base, especially since most users inherently trust Apple. “
Cryptorom scams are so named because they start out on dating sites where scammers use fake profiles to attract victims. After building trust with victims via unmonitored messaging apps, they persuade them to download scam apps and start trading/investing in cryptocurrencies.
In the case of Ace Pro, the scammers created and actively maintained a fake Facebook profile of a woman believed to be living a luxurious life in London, Sophos said.
When it was first submitted to App Store reviewers, the security vendor claimed that a malicious developer likely connected an app disguised as a QR scanner to a benign remote website.
Once approved, the app redirected to an Asia-registered domain linked to a fake trading interface, the company added.
Both Ace Pro and MBM_BitScan appear to connect to the same command and control (C2) infrastructure designed to resemble a legitimate Japanese crypto company.
Cryptorom scams are a form of “pig slaughter” scams that originated in Asia, combining romance-based social engineering with fraudulent cryptocurrency trading apps.
Editorial Credit Icon Image: Tada Images / Shutterstock.com
