A trojanized wallet app is a fake or modified cryptocurrency wallet application that looks legitimate but is built to steal secrets, especially recovery phrases, seed phrases, or private keys. It may be delivered through phishing links, counterfeit app stores, support scams, or direct download prompts that imitate a real vendor.
This matters because self-custodied wallets can be taken over if the seed phrase is exposed; the attacker does not need to crack encryption or break the blockchain. In real attacks, the malicious app may prompt the user to “verify” their wallet by entering the recovery phrase, then send it to the operator. Defenders should treat wallet installers as high-risk software, verify the publisher and download source, and never enter a recovery phrase into any app other than the trusted wallet during a legitimate recovery flow.