Criminals mimic Poloniex in Google Play

Fake Poloniex cryptocurrency trading apps found in Google Store
26 October 2017   1647

One of the most popular cryptocurrency exchanges, Poloniex, fells prey to cybercriminals. Thus, due to the Poloniex's lack of an official app, the fraudsters managed to lure users into downloading credential stealing malware.  

ESET security researchers discovered variations of the app in the Google Play store on two separate occasions:

  • “Poloniex”, which was downloaded up to 5,000 times, despite having bad reviews
  • “POLONIEX EXCHANGE” using the developer name “POLONIEX COMPANY”,  was downloaded by up to 500 users

The app managed to harvest Poloniex login credentials as well as to trick victims into making their Gmail accounts accessible to the malicious app allowing them to control notifications to the user about unauthorized logins and transactions. Once exploited, the app attempts to appear functional by redirecting users to the mobile version of the legitimate Poloniex website.

If you're a Poloniex user and have installed any of these malicious apps on your device, start by uninstalling them. Make sure to change both your Poloniex and Gmail passwords and consider enabling 2-factor-authentication for both services.
 

ESET research team

Both Google and Poloniex have been notified of the malicious imposters. In order to prevent similar attacks, the users are recommended to check twice before downloading and using any app, to pay attention to app ratings and reviews, and be cautious of third party apps triggering alerts and windows appearing to be connected to Google.  

Poloniex to Delist Number of Tokens

6 tokens will be delisted from the exchange gradually, starting 15.10 and ending up 15.11
10 October 2019   158

The Poloniex exchange will no longer support the crypto assets Pascal (PASC), Steem (STEEM), Navcoin (NAV), GameCredits (GAME), LBRY Credits (LBC) and Clams (CLAM). The marketplace reported this to users in the mailing list.

Here are some important dates to keep in mind:

  • October 15th at 16:00 UTC: trading of PASC, STEEM, NAV, GAME, LBC and CLAM will be disabled
  • October 28th at 16:00 UTC: LBC withdrawals will be permanently disabled
  • November 15th at 16:00 UTC: PASC, STEEM, NAV, GAME, CLAM withdrawals will be permanently disabled

Please be sure to withdraw your assets before the withdrawal deadlines shown above. 
 

Poloniex

Reasons for the decision weren't mentioned.