A malicious app was delisted from the Solana DApp Store after being displayed for about 1 hour; it had requested users' seed phrases

Odaily: Solana Mobile posted on X that a malicious third-party app named "SKR Claim" was submitted to the Solana DApp Store. Attackers gained unauthorized access to the DApp publishing portal and modified the App Spotlight and Quests interfaces; the app would ask users to enter their seed phrases. The app was delisted after being displayed for about 1 hour and is currently being removed from devices where it was installed. The team has fixed the vulnerability that allowed links to apps that were not fully published, and reminds users that Solana Mobile will not ask for seed phrases or crypto assets, nor will it ask users to connect their wallets to claim airdrops.