Malicious Code in FomoPeek App Targets iOS Crypto Users

Security firm SlowMist has uncovered hidden malware inside FomoPeek versions 1.1 and 1.2 that steals private keys and seed phrases. Several users reported losses, and a joint probe with OKX confirmed the app as the source.

The malicious modules include an exploit framework aimed at iOS kernel flaws. It supports eight attack methods and picks the right one based on device model and iOS version, covering releases from 12.0 through 18.7 plus 26.0 and 26.1.

Once triggered, the code bypasses sandbox restrictions, reads Keychain data and sends it to hidden command servers. The theft routines stay active and run on a schedule.

Affected users are urged to generate fresh wallet keys on a clean device, move funds immediately, update to the latest iOS and stop using FomoPeek altogether.

Based on information from https://cryptonews.net