Share this article
Fake MetaMask App on Google Play Store Hosted Crypto Malware
Ethereum dapp service MetaMask was targeted by crypto-stealing malware found on Google's Play Store.
Updated Sep 13, 2021, 8:53 a.m. Published Feb 11, 2019, 2:00 p.m.
Make us preferred on Google
A form of malware that replaces victims' cryptocurrency wallet addresses has been discovered for the first time in an app on Google Play Store.
Security firm ESET published a blog post on Friday, saying that the malware, known as a “clipper,” intercepts the content of the clipboard and, if it finds the addresses of online cryptocurrency wallets, can replace them with addresses owned by the attacker.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
The malware-laden app, discovered by ESET, impersonates a service called MetaMask that provides access to ethereum decentralized applications, or dapps. The malware's main purpose is to steal MetaMask users' credentials and private keys to be able to access their ethereum funds. However, it can also intercept bitcoin and ethereum wallet address copied to the clipboard.
MetaMask does not currently offer an app product for mobile devices.
The fake app's description can be seen below:
The app was removed from the Play Store after ESET reported it to Google's security team.
In response to the malware's discovery, MetaMask tweeted:
"We would appreciate if @GooglePlayDev would reserve trademarked names for apps, especially repeat phishing targets like us.”
This isn't MetaMask's first issue with Google. Back in July, the firm's browser extension was erroneously removed from Google's Chrome Web Store for about five hours before being restored.
To stay safe from such mobile malware, ESET advised users to keep devices updated and double-check every step in all crypto transactions, including wallet addresses copied on a clipboard.
Earlier this month, another form of malware was discovered by cybersecurity firm Palo Alto Networks that steals browser cookies and other information on victims’ Apple Mac computers to steal cryptocurrencies.
Google Play Store image via Shutterstock; malware screenshot courtesy of ESET
More For You
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
More For You
Fed rates decision, Tesla earnings, Bybit roadmap: Crypto Week Ahead
Your look at what's coming in the week starting Jan. 26.
What to know:
You are reading Crypto Week Ahead: a comprehensive list of what's coming up in the world of cryptocurrencies and blockchain in the coming days, as well as the major macroeconomic events that will influence digital asset markets. For an updated daily email reminder of what's expected, click here to sign up for Crypto Daybook Americas. You won't want to start your day without it.
Top Stories
