TREE NEWS reports: SlowMist and OKX’s security team traced a wave of wallet drains to FomoPeek versions 1.1–1.2, a meme-monitoring app that bundled iOS kernel exploit code to escalate privileges, escape the app sandbox and decrypt the system keychain. The malware silently exfiltrated plaintext private keys and scanned other wallets and memos on the same device, with no phishing site or malicious signature involved. The teams’ joint review followed reports of assets being emptied without unusual user interaction.
FomoPeek iOS App Exploited Kernel Flaw to Steal Wallet Private Keys, SlowMist and OKX Security Say
AI take
The notable shift here is the attack surface: a consumer-facing iOS app weaponizing kernel-level privilege escalation to reach the system keychain, which bypasses the user-behavior defenses most wallet hygiene advice assumes. It affects anyone who installed the app and held keys on the same device, not just users who clicked something wrong. The open question is whether this exploit pattern — signed apps as delivery vehicles for keychain decryption — spreads beyond this single app, and how app-store review and mobile key storage adapt.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.
Related News
1h ago
Binance to Restore Phase One Withdrawals on Nov 1, 2026
4h ago
Binance Says It Has Recovered 90% of Stolen Assets
5h ago
Trump Says He Is Looking Into Binance, Not Concerned About It
8h ago
FBI: North Korea Behind Over $6B Binance Hack
9h ago
Name.com says 15 customer domains hijacked, all now restored; 10 linked to Vercel
10h ago
Jupiter Lend USDC Withdrawal Liquidity Rebounds to $27.9M