Just as CoinDesk reported that a fake Ledger app had drained millions from App Store users, TechCrunch revealed that another app had been harvesting sensitive user data.