An iOS app disguised as a whale-tracking tool quietly stole nearly $580,000 in crypto assets from the App Store.
It’s called FomoPeek. It claims to track large Ethereum and Solana transfers, lures people into installing it under the banner of “read-only monitoring,” and even offers a few dollars’ worth of USDT rewards—so you install the app and run it on a real device for a few minutes.
According to an investigation by the SlowMist and OKX Security teams: versions 1.1 and 1.2 released in September hide malicious modules that use iOS vulnerabilities to escape the sandbox, retrieve the Keychain, and access files from other apps. The targets are 19 wallet and note-taking apps—storing seed phrases in note apps is also unsafe.
Reminder: update your system to the latest version; keep seed phrases offline forever; don’t screenshot and store them on your phone; and don’t install reward apps from unknown sources, no matter how tempting they look.
Source: SlowMist, Cointelegraph.
It’s called FomoPeek. It claims to track large Ethereum and Solana transfers, lures people into installing it under the banner of “read-only monitoring,” and even offers a few dollars’ worth of USDT rewards—so you install the app and run it on a real device for a few minutes.
According to an investigation by the SlowMist and OKX Security teams: versions 1.1 and 1.2 released in September hide malicious modules that use iOS vulnerabilities to escape the sandbox, retrieve the Keychain, and access files from other apps. The targets are 19 wallet and note-taking apps—storing seed phrases in note apps is also unsafe.
Reminder: update your system to the latest version; keep seed phrases offline forever; don’t screenshot and store them on your phone; and don’t install reward apps from unknown sources, no matter how tempting they look.
Source: SlowMist, Cointelegraph.
