In early 2025, cybersecurity researchers at identified over 200 fraudulent GitHub repositories impersonating Yape and similar fintech apps (like Nequi and Mercado Pago). One particular repository, yape-auto , was cloned over 1,500 times before being reported. Victims reported losing anywhere from 50 to 3,000 soles ($13 to $800 USD) via unauthorized transfers.
Yape · Issue #416 · PrivSec-dev/banking-apps-compat-report yape fake github
Before you run that shiny new Yape tool from GitHub, follow these rules: In early 2025, cybersecurity researchers at identified over
Fake repositories may claim to offer "enhanced" Yape features but instead contain Node.js stealers or Remote Administration Trojans (RATs) that harvest crypto wallet data and browser history. How to Protect Yourself In early 2025