Snap Store experiences domain hijacking attack, tampering with wallet applications to steal cryptocurrency assets

PANews January 21st reported that according to Slow Fog’s Chief Information Security Officer 23pds, a new type of “Domain Resurrection Attack” has recently appeared on the Linux platform Snap Store. Hackers take over expired developer domains and update the original legitimate applications through official channels, disguising them as wallets like Exodus, Ledger Live, Trust Wallet, etc., to trick users into entering their seed phrases, thereby stealing cryptocurrency assets. It has been confirmed that storewise.tech and vagueentertainment.com have been hijacked. This attack abuses the Snap mechanism, allowing originally trusted software to be embedded with malicious code without the user’s knowledge.