🍏 Analysts have uncovered large-scale attacks targeting iPhones — cryptocurrency is being stolen through ordinary websites and online ads. Here's what we know:
1️⃣ How the infection works. Malicious code is embedded in websites and advertisements. Attackers use tools called DarkSword and Coruna, which can exploit vulnerable versions of iOS without requiring any action from the user. Researchers even discovered malicious ads on Instagram.
2️⃣ What's being stolen. Seed phrases, passwords, wallet data, private messages, and other personal information. The malware can even search for private keys hidden in photos and notes. Targeted wallets include Trust Wallet, MetaMask, Phantom, TronLink, and others.
3️⃣ How the operation works. Researchers uncovered a full-scale criminal infrastructure featuring control panels, affiliate accounts, commission systems, and device limits.
4️⃣ The money. According to the investigation's author, more than $2 million has already been stolen. Attack tools targeting iOS devices are being sold for $12,888, while their developers are recruiting partners among website owners and advertising networks.
5️⃣ How to protect yourself.
* Update your iPhone to the latest available version of iOS.
* Enable Lockdown Mode.
* NEVER store seed phrases in your photo gallery or Notes app.
* For large crypto holdings, use a separate hardware wallet with private keys that are never stored on your smartphone.
1️⃣ How the infection works. Malicious code is embedded in websites and advertisements. Attackers use tools called DarkSword and Coruna, which can exploit vulnerable versions of iOS without requiring any action from the user. Researchers even discovered malicious ads on Instagram.
2️⃣ What's being stolen. Seed phrases, passwords, wallet data, private messages, and other personal information. The malware can even search for private keys hidden in photos and notes. Targeted wallets include Trust Wallet, MetaMask, Phantom, TronLink, and others.
3️⃣ How the operation works. Researchers uncovered a full-scale criminal infrastructure featuring control panels, affiliate accounts, commission systems, and device limits.
4️⃣ The money. According to the investigation's author, more than $2 million has already been stolen. Attack tools targeting iOS devices are being sold for $12,888, while their developers are recruiting partners among website owners and advertising networks.
5️⃣ How to protect yourself.
* Update your iPhone to the latest available version of iOS.
* Enable Lockdown Mode.
* NEVER store seed phrases in your photo gallery or Notes app.
* For large crypto holdings, use a separate hardware wallet with private keys that are never stored on your smartphone.
