• News/
  • https://www.theregister.com/2024/03/28/canonical_snap_store_scams/

Canonical cracks down on crypto cons following Snap Store scam spree

The Register
·
Liam Proven
·
Published Mar 28, 2024
·
Updated

After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies. In what's expected to be a temporary measure, an announcement on the Snapcraft Discourse says that the Ubuntu vendor will switch to manual review of all new snap name registrations. The post from Holly Hall says: Over the recent weeks, the Snap Store has been under attack by various publishers attempting to upload malicious crypto-wallet snaps. Former Ubuntu staffer Alan "Popey" Pope has detailed some of this wave of scammy apps. Firstly, a fake "Exodus" wallet app caused one user to lose nine Bitcoins – currently worth roughly $490,000. This scam app from movementexod was masquerading as the real Exodus wallet from Exodus Movement – a company that already offers native Debian packages alongside its Windows and Mac versions. A few days later, Popey published a follow-up post including the response of Canonical founder and "self-appointed benevolent dictator for life" Mark Shuttleworth. You can read the discussions of the problem on the Snapcraft forums. (If you are inclined to join in, note that the Snapcraft Discourse instance has its own membership system, separate from the official Ubuntu instance.) The saga did not end there. This month, he detailed ten more fake wallets that appeared on the Snap Store, from an account called digisafe00000. When these were removed, the next day, replacements reappeared from a new account called codeshield0x0...

Read full article

Affected Software

2 affected components
Canonical Snap Store
Exodus Movement Exodus Wallet
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the main topic of the article?

The article discusses Canonical's response to scams involving cryptocurrency-related apps in the Snap Store.

2

What security implications are discussed in the article?

The article highlights the risks of credential theft due to malicious apps uploaded to the Snap Store.

3

What products or software are affected by the scams mentioned?

The affected software includes the Canonical Snap Store and the Exodus Wallet by Exodus Movement.

4

What measures is Canonical taking to address the security issue?

Canonical is implementing policy changes in the Snap Store to combat the influx of fraudulent applications.

5

What prompted the changes in policy by Canonical regarding the Snap Store?

The increase in scams related to cryptocurrency apps uploaded to the Snap Store led to Canonical's policy changes.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203