Security researchers have identified a fraudulent cryptocurrency trading application named Padre Terminal that was available on the Apple App Store. The app is linked to the theft of approximately $23,000 from 27 Solana wallets. Users who connected their wallets to the app likely granted unauthorized access, resulting in fund drainage.

What should defenders do?

Users who have installed Padre Terminal should uninstall the app immediately and revoke any wallet permissions or connections granted. Affected individuals should monitor their Solana addresses for unusual outbound transactions and consider moving remaining funds to a new wallet with fresh private keys. Verify the legitimacy of any cryptocurrency trading app before connecting wallets, and only download apps from verified developers with established reputations.

highMalware

Fake cryptocurrency trading app 'Padre Terminal' linked to $23,000 Solana wallet theft

Fraudulent iOS app distributed via Apple App Store siphons funds from 27 wallets

Cyber.TechVoidPublished about 1 hour agoUpdated less than a minute ago1 min read

Fake cryptocurrency trading app 'Padre Terminal' linked to $23,000 Solana wallet theft

Key Takeaways

A fraudulent iOS app named Padre Terminal was distributed via the Apple App Store and linked to $23,000 in Solana wallet thefts.
Twenty-seven Solana wallets were affected; the exact method of credential or key extraction is still being investigated.
The app has been removed from the Apple App Store, but users who installed it should uninstall it and revoke wallet connections.

Related Security News

highMalware

Fake AI Desktop Apps Deploy Crypto Miners via Signed Executables

Threat actors have been distributing malicious loaders and cryptocurrency miners disguised as legitimate desktop applications for OpenAI ChatGPT and Anthropic Claude. The campaign, attributed to 'Yoba', involves creating fake GitHub projects mimicking AI tools such as GPT-5.6 Sol and Claude Opus. These counterfeit applications abuse signed executables to bypass security controls and deploy mining malware onto victim systems.

The Hacker Newsabout 1 hour ago1 min read