SlowMist founder Yu Xian said a food-delivery app called ComeCome, operating through comecome.icu, was found using a method similar to the earlier FomoPeek app poisoning incident. According to his disclosure, FomoPeek versions 1.1 to 1.2 contained a malicious SDK with eight iOS kernel exploit paths, allowing the code to choose an attack method based on device model and system version. Known affected iOS versions span iOS 12 to 18.7 and 26 to 26.1. Once the attack succeeds, it can break out of the iOS sandbox and steal assets from crypto wallets. Yu Xian also warned that the same kind of threat may extend to iPad and Mac devices. He advised users to update to the latest iOS release immediately and stay highly cautious about apps from unknown sources.
ChainCatcher reported that SlowMist founder Yu Xian disclosed that, after the earlier FomoPeek app poisoning incident involving stolen crypto assets, a food-delivery app called ComeCome (comecome.icu) has been found using a similar attack method.
Yu Xian said FomoPeek versions 1.1 to 1.2 contained a malicious SDK that integrated eight iOS kernel exploit techniques. The code could automatically choose an attack route based on the device model and system version. Known affected iOS versions cover iOS 12–18.7 and 26–26.1.
If the attack succeeds, it can break through the iOS sandbox mechanism and then steal assets from crypto wallets.
He added that this type of threat may also affect iPad and Mac devices. Yu Xian advised users to update to the latest iOS version immediately and remain highly cautious about apps from unknown sources.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
