# Kaspersky · Drain Watch

3 incidents, 0 live. JSON: https://drains.watch/t/kaspersky.json · RSS: https://drains.watch/t/kaspersky/feed.xml

- [Kaspersky finds 26 'FakeWallet' apps on Apple's App Store stealing wallet recovery phrases](https://drains.watch/i/kaspersky-fakewallet-26-ios-apps-apr-2026) (closed, High, Partly contained, since Apr 20, 2026)
- [Arkanix stealer, likely built with LLM help, targeted crypto wallets before its makers shut it down](https://drains.watch/i/arkanix-stealer-llm-assisted-crypto-wallets-feb-2026) (closed, Low, Contained, since Feb 24, 2026)
- [Kaspersky: North Korea's BlueNoroff uses generative AI to speed up malware in GhostCall and GhostHire crypto attacks](https://drains.watch/i/bluenoroff-ghostcall-ghosthire-genai-malware-oct-2025) (closed, Medium, Still active, since Oct 28, 2025)