Fake Ledger app steals $9.5 million in crypto

A fraudulent application impersonating Ledger Live was available on the Apple App Store, leading to the theft of at least $9.5 million in cryptocurrency from over 50 victims. The phishing campaign, active for a week, targeted users across multiple blockchains including Bitcoin, Ethereum, and Solana. Victims unknowingly entered their recovery phrases into the malicious app, granting attackers full access to their digital assets. Stolen funds were traced to KuCoin deposit addresses and a mixing service, raising questions about Apple's app review process and the security of digital asset platforms.