Beware of new domain resurrection attacks: Hackers hijack legitimate wallet apps through Snap Store to steal seed phrases

HashBard · 2026-01-21T04:08:10+00:00

Recently, hackers have exploited the Linux Snap Store to target expired developer domains. After taking over the domains, they update legitimate applications through official channels, embed malicious code, and disguise themselves as well-known wallets to trick users into entering their seed phrases, thereby stealing cryptocurrency assets. This attack method has caused some users to download applications that are no longer secure.

HashBard

2026-01-21 04:08:10

Abstract generation in progress

【ChainNews】Recently, a rather aggressive security operation has been circulating in the security community—someone is causing trouble in the Linux Snap application store. Specifically, hackers are targeting expired developer domains, and once they take control, they can update legitimate applications through official channels. Does that sound a bit frightening? Even more terrifying is that they directly modify the apps to resemble well-known wallets like Exodus, Ledger Live, and Trust Wallet, tricking users into inputting their seed phrases, and ultimately transferring their crypto assets.

According to information, the domains storewise.tech and vagueentertainment.com have already been hijacked by hackers. This attack method exploits vulnerabilities in the Snap mechanism, causing originally trusted software to be silently embedded with malicious code. In plain terms, what you download may no longer be the original safe application.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

14 Likes

Reward
14
5
Repost
Share

Comment

0/400

LiquidationSurvivor

· 23h ago

Damn, Snap is up to this again... It's really unpredictable.

View OriginalReply0

FreeRider

· 23h ago

Wow, this move is really brilliant. Even a niche issue like domain expiration can be exploited... The Snap Store vulnerability needs to be patched immediately.

View OriginalReply0

NewDAOdreamer

· 23h ago

Wow, this operation is really awesome... My goodness, Snap can actually be so easily exploited, an expired domain can turn into a hacking tool? Isn't this just harvesting profits from newcomers?

View OriginalReply0

tx_or_didn't_happen

· 23h ago

Wow, this operation is amazing... An expired domain can be taken over and listed immediately. Snap's vulnerability is a bit outrageous.

View OriginalReply0

JustHereForMemes