Researchers last week found the first Android app on the Google Play store that monitors a device’s clipboard for Bitcoin and Ethereum addresses and swaps them for addresses under the attacker’s control. This allows the attackers to steal any payments you make without your knowledge that you sent it to the wrong address. ESET Android security researcher Lukas Stefanko performed an analysis and found the app was stealing a user’s cryptocurrency using two different attack methods. The attackers were using Telegram to receive the stolen keys and seeds.
Source: https://www.bleepingcomputer.com/news/security/first-cryptocurrency-clipboard-hijacker-found-on-google-play-store/