Malicious iOS app FomoPeek linked to $580,000 in crypto theft

The malicious iOS application FomoPeek, distributed via the Apple App Store, has been linked to the theft of approximately $580,000 in crypto assets. SlowMist reported that the app contained kernel exploit modules capable of bypassing Apple's sandbox to access sensitive wallet data and Keychain files. The security firm, alongside the OKX security team, identified that the attack framework supported iOS versions 12 through 18.7.2. On-chain analysis revealed that a hacker address received roughly 580,000 USDT, which was subsequently laundered through various addresses and services, including FixedFloat, KuCoin, and cce.cash. A clean version of the app was released on September 17.