Just saw some news that chilled me... 26 malicious apps on the App Store pretending to be crypto wallets. It's crazy how they manage to bypass Apple's filters. They start with trivial apps like calculators, then suddenly redirect you to phishing sites that imitate the official interface. The really scary part is that they push you to install a developer profile on your phone to download the real crypto app... but it's a Trojan. Once they have your seed phrase, it's over, they drain everything.

Apparently, it comes from the SparkKitty group and has been going on since fall 2025. The targeted crypto apps are mainly hot wallets but also users with hardware like Ledger. The worst part is that even hardware wallets can be compromised if you enter your recovery phrase on your phone.

So, from now on, I only download my crypto apps from official websites, never directly from the App Store. How do you guys do it?