Blockchain security firm SlowMist announced that a joint investigation with the OKX security team revealed malware in FomoPeek app versions 1.1-1.2 that could lead to the theft of users' cryptocurrency assets. Multiple recent reports of damage confirmed private key leaks, and it was found that some victims had used the app. The malware exploits iOS vulnerabilities to escape the sandbox and can then access keychain data and files from other apps. This means that private keys, seed phrases, login information, chat records, and more could be exposed. SlowMist recommends that users who have installed these versions generate new private keys and seed phrases on a secure device, immediately transfer their assets, and discontinue the use of FomoPeek.
