Use Apple’s App Store at your own risk

Macworld Apple’s app-vetting procedures are in the spotlight this week, as not one but two news stories demonstrate the grave consequences of what appears to be a troublingly lackadaisical approach at the Cupertino-based company. Case study 1: “Ledger Live” On Tuesday, the crypto news site CoinDesk reported on a week-long phishing campaign predicated on the use of a cloned Mac app. Financial hackers created a cloned app called Ledger Live, using the former name of a legitimate wallet app for iOS and macOS, and managed to get it accepted by the Mac App Store. Users of this app were prompted to enter recovery phrases, and those who did so had their wallets completely emptied. CoinDesk says the scam affected more than 50 victims and resulted in the loss of at least $9.5m worth of Bitcoin, Ether, and other cryptocurrencies. One victim, a musician going by the name G. Love, vented his frustrations on X. “I had a really tough day today,” he wrote. “I lost my retire