Victims download and use apps from official app stores (e.g. Google Play or Apple App Store), which are scam apps imitating the ones of official projects. The victims are not aware of using a scam app and insert their seed phrases or private keys, which are sent out to the scammers who drain their wallets.
Users should check apps before downloading them. This can be accomplished by checking the download rate of the app in the app store as well as by analyzing available user ratings (beware fake ratings!).
