The BitKeep team acknowledged that some APK packages that customers downloaded may have been taken over by hackers and installed.
While many people are still taking advantage of the holiday season, hackers are busy stealing $8 million through a persistent BitKeep wallet attack.
On December 26, some BitKeep customers who utilize the multichain cryptocurrency wallet claimed that money was being taken out of their wallets and transferred when they were not using them. The BitKeep team acknowledged that some APK package downloads had been compromised by some attackers and deployed with malicious code in their official Telegram group. They wrote:
“If your funds are stolen, the application you download or update may be an unknown version (unofficial release version) hijacked.”
The BitKeep team requested that the impacted users provide the pertinent information via a Google form in order to aid in the inquiry.
Digital assets worth more than $5 million have already been found in one alleged hacker wallet address. PeckShield, a blockchain security and analytics company, stated that more than $8 million in Tether, DAI, Binance Coin, and Ether had been taken so far, despite the fact that the amount exploited is still not final and the attackers are continually sending money to different wallet addresses.
On October 17, a bug in the BitKeep wallet caused the attacker to flee with $1 million worth of BNB. Through the use of a service that permitted token swaps, the exploit was carried out. The wallet company shut down the service and promised to compensate any impacted customers.