The Growing Threat to Smartphone Users in Ukraine

In the article titled “Experts Explain How Ukrainians Can Protect Crypto-Assets from Smartphone Attacks”, cybersecurity analysts outline how smartphones have become a prime target for hackers. As the use of mobile devices as financial tools grows, particularly in Ukraine, they are increasingly vulnerable to cyber-attacks aimed at stealing personal data and accessing cryptocurrency wallets.

Why Ukraine is a Target

Yuriy Serov, Head of Investigations at Global Ledger, explains that the rise in crypto-activity has attracted the attention of cybercriminals. During wartime, smartphones serve as essential financial tools for many Ukrainians, making them attractive targets for hackers. Despite a lack of specific statistics on mobile attacks in Ukraine, general figures highlight the scope: Ukrainians spent $882 million on crypto-assets in 2023–2024, and cryptocurrency wallet downloads increased by 2.5 times.

Evolving Hacker Behavior

Serov notes a significant trend in combining cyber intelligence with financial motivation. North Korean hackers exemplify this trend by stealing $1.89 billion in 2025. A common attack scenario involves fake job offers sent via LinkedIn or Telegram, leading victims to install malicious software during purported “test assignments.” In one case, this resulted in losses totaling around $1000 in Ethereum and Solana and compromised data for over 230 individuals.

Major Threats and User Errors

Experts emphasize that most risks stem not only from technology but also from user behavior. Common problems include storing seed phrases on phones (in notes or cloud storage), using fake wallet apps, overlay attacks that replace interfaces, address poisoning through transaction history manipulation, phishing sites (drainers) connecting wallets fraudulently, and SIM swap attacks intercepting numbers for account access.

Protecting Crypto-Assets: Essential Steps

To safeguard against these threats:

• Utilize cold (hardware) wallets for large amounts.
• Store seed phrases offline.
• Use authenticator apps instead of SMS verification.
• Regularly update systems.
• Diversify assets across multiple wallets.
• Verify addresses and websites before transactions.

Denis Ivanov from Hacken highlights that not keeping funds on hot wallets on phones is crucial. The “cold wallet + alternative signing device” rule can prevent 99% of crypto-asset losses.
The consensus among experts is clear: smartphones represent a significant risk point for crypto investors. Yet by adhering to fundamental security rules and staying vigilant, most threats can be minimized effectively.