Applications were going through crypto-coins portfolios for NEO, Tether and an extension to access Ethereum (ETH), MetaMask. They were designed to violate users' mobile bank credentials and credit card information. After the phishing application is installed and launched, it prompts you for the private password and password of the user's wallet.
False Crypto address wallets created a new wallet generating a public address and private key - which are required to securely send and receive digital currency - but they only displayed the public address of the attacker without user access to the private key. Thinking that the application generated the public address, users deposited their funds in this wallet, but could not withdraw them, because the private key belonged to a cybercriminals.