Malicious FOMO App Available on Apple App Store for One Week, Risking Private Key Theft

SlowMist's Chief Information Security Officer warned that the DarkSword malware is targeting iPhone users by exploiting memory corruption vulnerabilities in Safari's WebKit and JavaScriptCore to steal crypto assets. The vulnerability affects iOS versions 13 through 16.5. Additionally, a malicious version of the FOMO app was available on the Apple App Store from September 9 to 17, containing modules designed to steal seed phrases and private keys. SlowMist advises users to treat all associated keys and sensitive credentials as compromised, even if the app has been updated or deleted.