🚨 Malicious app found in the Apple App Store! Was $580,000 worth of cryptocurrency stolen? 🔥
Group: 点击进入玖玖的粉丝群
This time, it’s not an exchange that was hacked. Instead, it appears to be a seemingly ordinary iOS app that may directly expose users’ crypto wallet data. SlowMist’s latest investigation links an app called FomoPeek to approximately $579,900 worth of stolen cryptocurrency. On-chain tracking shows that a primary hacker address received 579,984 USDT, and then the funds were transferred across multiple networks and services. 🚨
What’s truly dangerous is this: the issue may not be as simple as “the app stealing data.”
SlowMist says that some versions of FomoPeek include malicious modules and iOS vulnerability exploit code, attempting to bypass the system sandbox restrictions and further obtain data stored by other apps. Among the targets of the attack is even the iOS Keychain.
And the Keychain may store various credentials, tokens, and sensitive information. For users who have a crypto wallet installed on the same phone, once these permissions are abused, the risk can quickly escalate. ⚠️
Even more noteworthy: this malicious code isn’t present in every version.
SlowMist points out that specific versions released on September 9 and September 12 contain malicious components, while version 1.3 released on September 17 has already removed the relevant components.
That means the version number could be a crucial clue in this incident.
On the on-chain side, the 579,984 USDT was later transferred across networks and involved services such as FixedFloat, KuCoin, and cce.cash. The funds were constantly split, converted, and moved, requiring security teams to keep tracking through on-chain traces. 👀
For ordinary users, the most important thing to be wary of right now isn’t a number—it’s a more realistic question:
How many permissions does a normal app on your phone actually have?
If your device has an exchange, a wallet, and other financial apps at the same time, then once a malicious app successfully breaks through system isolation, the risk may be far greater than compromising a single account.
Click the profile picture to join the Jiujiu chat group and get daily strategies 🚀
#加密安全 #FomoPeek #iOS
Group: 点击进入玖玖的粉丝群
This time, it’s not an exchange that was hacked. Instead, it appears to be a seemingly ordinary iOS app that may directly expose users’ crypto wallet data. SlowMist’s latest investigation links an app called FomoPeek to approximately $579,900 worth of stolen cryptocurrency. On-chain tracking shows that a primary hacker address received 579,984 USDT, and then the funds were transferred across multiple networks and services. 🚨
What’s truly dangerous is this: the issue may not be as simple as “the app stealing data.”
SlowMist says that some versions of FomoPeek include malicious modules and iOS vulnerability exploit code, attempting to bypass the system sandbox restrictions and further obtain data stored by other apps. Among the targets of the attack is even the iOS Keychain.
And the Keychain may store various credentials, tokens, and sensitive information. For users who have a crypto wallet installed on the same phone, once these permissions are abused, the risk can quickly escalate. ⚠️
Even more noteworthy: this malicious code isn’t present in every version.
SlowMist points out that specific versions released on September 9 and September 12 contain malicious components, while version 1.3 released on September 17 has already removed the relevant components.
That means the version number could be a crucial clue in this incident.
On the on-chain side, the 579,984 USDT was later transferred across networks and involved services such as FixedFloat, KuCoin, and cce.cash. The funds were constantly split, converted, and moved, requiring security teams to keep tracking through on-chain traces. 👀
For ordinary users, the most important thing to be wary of right now isn’t a number—it’s a more realistic question:
How many permissions does a normal app on your phone actually have?
If your device has an exchange, a wallet, and other financial apps at the same time, then once a malicious app successfully breaks through system isolation, the risk may be far greater than compromising a single account.
Click the profile picture to join the Jiujiu chat group and get daily strategies 🚀
#加密安全 #FomoPeek #iOS
