After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies. In what's expected to be a temporary measure, an announcement on the Snapcraft Discourse says that the Ubuntu vendor will switch to manual review of all new snap name registrations. The post from Holly Hall says: Over the recent weeks, the Snap Store has been under attack by various publishers attempting to upload malicious crypto-wallet snaps. Former Ubuntu staffer Alan "Popey" Pope has detailed some of this wave of scammy apps. Firstly, a fake "Exodus" wallet app caused one user to lose nine Bitcoins – currently worth roughly $490,000. This scam app from movementexod was masquerading as the real Exodus wallet from Exodus Movement – a company that already offers native Debian packages alongside its Windows and Mac versions. A few days later, Popey published a follow-up post including the response of Canonical founder and "self-appointed benevolent dictator for life" Mark Shuttleworth. You can read the discussions of the problem on the Snapcraft forums. (If you are inclined to join in, note that the Snapcraft Discourse instance has its own membership system, separate from the official Ubuntu instance.) The saga did not end there. This month, he detailed ten more fake wallets that appeared on the Snap Store, from an account called digisafe00000. When these were removed, the next day, replacements reappeared from a new account called codeshield0x0...
Canonical cracks down on crypto cons following Snap Store scam spree
The Register
·Liam Proven
·Published Mar 28, 2024
·Updated
Affected Software
2 affected components
Canonical Snap Store
Exodus Movement Exodus Wallet
Frequently Asked Questions
1
What is the main topic of the article?
The article discusses Canonical's response to scams involving cryptocurrency-related apps in the Snap Store.
2
What security implications are discussed in the article?
The article highlights the risks of credential theft due to malicious apps uploaded to the Snap Store.
3
What products or software are affected by the scams mentioned?
The affected software includes the Canonical Snap Store and the Exodus Wallet by Exodus Movement.
4
What measures is Canonical taking to address the security issue?
Canonical is implementing policy changes in the Snap Store to combat the influx of fraudulent applications.
5
What prompted the changes in policy by Canonical regarding the Snap Store?
The increase in scams related to cryptocurrency apps uploaded to the Snap Store led to Canonical's policy changes.