FomoPeek iOS app linked to nearly $580,000 crypto theft

A malicious FomoPeek iOS app distributed through Apple's App Store has been linked to nearly $580,000 in stolen crypto. SlowMist said the app contained two malicious modules that could exploit iOS vulnerabilities. The modules could gain elevated privileges and access Keychain data and files from other apps. SlowMist said affected versions were released on Sept. 9 and Sept. 12. Version 1.3 removed the malicious components when it was released on Sept. 17. SlowMist conducted the investigation with the OKX security team after receiving reports from users who suffered asset theft. Some of those users had previously installed affected FomoPeek versions. The exploit framework included eight attack methods. It supported iOS versions from 12.0 to 18.7.2 and from 26.0 to 26.1. SlowMist identified a primary hacker address that received about 579,984 USDT. The address became active on Sept. 15. The funds involved multiple blockchain networks. The funds were later consolidated and transferred through several addresses and services. SlowMist said some funds moved toward FixedFloat, KuCoin and cce.cash. Other funds were dispersed through additional addresses that SlowMist continued to trace. Apple, SlowMist and OKX did not respond to requests for comment before publication.