[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 11 sources · 3 days · First seen · Last updated

FomoPeek iOS malware cryptocurrency theft

Overview

Security firms, including Binance, SlowMist, and OKX, identified a malicious iOS application named ‘FomoPeek’ that was distributed through the Apple App Store. Marketed as a tool for tracking cryptocurrency whale wallets, versions 1.1 and 1.2 of the app contained hidden modules designed to exploit the iOS kernel and bypass the operating system’s application sandbox.

This exploit allowed the malware to access protected areas of a device, such as the iOS Keychain, to steal private keys, seed phrases, login credentials, and personal files. The framework was capable of targeting a wide range of software, from iOS 12.0 up to version 26.5.

Following the discovery, SlowMist linked the malware to the theft of approximately 580,000 USDT. Experts have advised affected users to remove the application, update their operating systems, and move funds to new wallets created on clean devices, as simply deleting the app may not protect assets if credentials have already been compromised.

Entities

OKX · SlowMist · FomoPeek · Apple · Google

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 9 sources
    FomoPeek malware on iOS linked to $580,000 crypto theft

    Malicious iOS app FomoPeek, distributed via the App Store, bypassed Apple’s sandbox to steal approximately $580,000 in USDT by exposing crypto private keys and seed phrases.

  2. [TECHNOLOGY] 3 sources
    FomoPeek malware targets iOS users to steal crypto keys

    Binance and SlowMist warn that FomoPeek app versions 1.1–1.2 contain malware capable of exploiting iOS to steal crypto private keys, seed phrases, and sensitive personal data.

Sources

ad-hoc-news.de · coinedition.com · criptotendencias.com · crypto.news · cryptobreaking.com · cryptoslate.com · en.bitcoinsistemi.com · livebitcoinnews.com · news.bitcoin.com · themarketperiodical.com · tronweekly.com