A fake version of the Rabby Wallet was discovered in the Apple App Store, causing concern among users and developers. The original Rabby Wallet, developed by DeBank, is a multi-chain wallet supporting over 120 different chains, including Arbitrum and Base. However, it is only available as a Google Chrome extension and a separate application for desktop devices.
The counterfeit application, developed by an unknown organization under the name "Dinh Thi Phuong Dung," raised suspicions due to its privacy policy, which directs users to the site "freeprivacypolicy[dot]com". This raises questions about how the application managed to pass Apple's moderation process. At the time of writing, searching for "Rabby Wallet" in the App Store brought up the fake application at the top, intensifying concerns about the effectiveness of Apple's verification process.
Sophos, a company specializing in cybersecurity, notes that fraudsters have changed their deception methods, moving away from traditional methods such as malicious advertising, social engineering, and fake websites. Instead, they now use the trust associated with platforms like Google Play and the Apple App Store to distribute their fraudulent applications. This includes efforts to extend their influence on victims' social media accounts, including Facebook and Tinder, where fraudsters try to convince users to download applications promising high returns.
