Solana Mobile: dApp Store now has malicious applications requesting mnemonic phrases

Solana Mobile posted on platform X that a malicious third-party application named "SKR Claim" was submitted to the Solana dApp Store. The attacker unauthorizedly accessed the dApp publishing portal and modified the App Spotlight and Quests interface, which requires users to input their mnemonic phrases.

The application was removed about 1 hour after being displayed in the dApp Spotlight and is currently being removed from installed devices. The team has fixed the vulnerability that allowed linking to incompletely published applications and reminded that Solana Mobile will not ask for mnemonic phrases or crypto assets, nor will it require users to connect their wallets to receive airdrops.