A vulnerability in some MediaTek-powered phones could allow attackers to extract encrypted data, including wallet seed phrases, using only a USB connection.

Crypto wallet company Ledger said one in four Android users were once at risk of having their wallet seed phrases stolen due to a MediaTek vulnerability affecting certain Android phones.

The hacker has been luring users in Brazil to download the fake Starlink app through phishing pages that impersonate the Google Play Store.