Cybercriminals Use Residential Proxies to Mask Malicious Traffic as Over 20 Crypto Wallet Apps Steal Recovery Phrases on Google Play

Cybercriminals are increasingly using residential proxy services to disguise malicious web traffic as ordinary online activity, making detection more difficult. This shift marks a move away from traditional "bulletproof" hosting methods, according to cybersecurity researchers. Concurrently, over 20 malicious cryptocurrency wallet applications have been identified on the Google Play Store. These apps are designed to steal users' recovery seed phrases, putting their crypto assets at risk. Security experts advise immediate removal of these apps to protect digital funds. These developments highlight evolving tactics in cybercrime, particularly targeting cryptocurrency users.