SlowMist

Sep 20, 2026

SlowMist’s Cos warns that seemingly normal iPhone apps may be used to poison devices and steal crypto

Cos, a member of blockchain security firm SlowMist, said in a post on X that users should pay close attention to cases in which seemingly normal iPhone apps are used to poison devices and steal crypto. He said that, compared with the previously noted FomoPeek app case on iPhone, the case involving the food delivery app ComeCome using a similar method deserves more attention. According to the post, some apps that appear normal may lead users to be poisoned after use, and the issue has already occurred on iPhone devices. Cos also advised users to update to the latest iOS version as soon as possible. He added that iPad and Mac devices may also be affected. The warning points to a broader security risk tied to apps that do not immediately appear malicious to users.

790

Gate

Sep 20, 2026

Gate security team warns users about risks tied to the FomoPeek app

Gate’s security team said the FomoPeek app contains malicious code with elevated security risks and may exploit iOS-related vulnerabilities to target other apps. According to the team’s analysis, the app is capable of accessing the clipboard, scanning sensitive data stored on a phone, and obtaining login credentials. Gate added that it has not found any losses suffered by Gate App users as a result of attacks linked to FomoPeek, and said its existing risk-control mechanisms are operating normally. The exchange urged users to update iOS to the latest version as soon as possible and check whether FomoPeek is installed on their devices. If the app is present, users are advised to uninstall it immediately and restart their phones. After that, Gate recommends logging back into the Gate App and other important applications. Users of Web3 wallets are also advised to review wallet security promptly and, if necessary, move related assets to reduce potential security exposure.

1240

Binance Wallet

Sep 19, 2026

Binance Wallet warns iPhone users to check for FomoPeek app after security disclosure

Binance Wallet has issued a security alert asking iPhone users to check whether they have installed the FomoPeek app, after a recently disclosed incident flagged by the community. According to security firms including SlowMist, versions 1.1 to 1.2 of the third-party app contain malicious code that can exploit an iOS vulnerability to gain the highest level of device privileges. If successful, the malware may access sensitive data stored on the device, including private keys, seed phrases, login credentials, chat records, and files. The notice says the threat targets the device itself rather than a single app, meaning data across all applications on an affected iPhone or iPad could be exposed. Binance Wallet asked users to check two points: whether they are using an iPhone or iPad running iOS 26.x or earlier, and whether they have installed FomoPeek. Users who meet both conditions are advised to delete the app immediately, avoid reinstalling it, update iOS to the latest version, and, if they use a self-custodial wallet, create a new wallet on a device that never had the app installed before moving assets to a new address. Binance also told users to preserve the affected device and related evidence if they notice suspicious asset activity and contact customer support for investigation.

960

SlowMist

Sep 19, 2026

SlowMist warns FomoPeek App versions 1.1 to 1.2 pose asset theft risk

SlowMist has issued a security alert on FomoPeek App versions 1.1 to 1.2 after receiving multiple reports of stolen user assets. The firm said verified cases involved private key leaks, and some affected users had downloaded and used those versions of the app. After a joint review with the OKX security team, SlowMist said it found clear evidence that the application had been implanted with malicious code. According to the alert, the app bundled two modules unrelated to its stated business functions. One of them contained a professional iOS kernel attack framework with eight exploit options that could automatically choose an attack path based on device model and system version. The affected iOS versions were listed as iOS 12.0 to 18.7 and 26.0 to 26.1. If the attack succeeds, the app can break through iOS sandbox isolation, read and decrypt the system Keychain, and access data files from other apps on the device. SlowMist said private keys, seed phrases, login credentials, chat records and files stored on the device could all be exposed. It also said the app connected to hidden servers unrelated to its public business and received remote instructions, with intercepted plaintext communications showing the attack function was active and executed regularly. Users who installed or used the app were urged to check account and key security, create new accounts and keys on a safe device, move assets, update iOS, stop using the app, and keep evidence if abnormal asset activity is found.

1010

Total 12 items

Go topage

Bit.Fan