Hackers have stolen at least $ 1.4 million from a number of people through Cryptoroam attacks, using a combination of social media, dating applications, cryptocurrency, and abuse of Apple’s company developer program, according to AppleInsider reports.
Fraud has been circulating for about six months and the Apple iOS platform is the target, the report said.
Modus Operandi Scammers began by gaining target trust through social media or data applications.
After that, the victim was captivated to install a modified version of the Cryptocurrency exchange through a website that resembled the Apple App Store display from where they were given investment because the target was requested to download mobile device management profiles.
After they do it, scammers deceive the victims because of cash, add reports.
According to the Sophos report, a victim loses around $ 87,000 in this fraud, with a loss of $ 45,000 and $ 25,000 also reported by others.
The Bitcoin address has been discovered by Cybersecurity researchers with only under $ 1.4 million transferred there.
Go with the fact that it is a single address and much more that can be used by scammers, the amount of money stolen can be higher.
“After returning to the fake App Store webpage, unsuspecting users are then asked to download the application signed by a certificate related to mobile device management profiles through the Apple Company Provisioning or Signature Distribution Method.
The application in question is a fake version of the Cryptocurrency Bitfinex trading application , “Report said.
The next report added, “The victim was then convinced to make a small investment into the cryptocurrency as proof of concepts, and was allowed to withdraw profits.
When a larger deposit was carried out, the victim found that it could not be pulled and was told by the attacker only withdrew money for themselves , that more must be invested, or tax must be paid to withdraw money.
“