SlowMist releases FomoPeek App version 1.1–1.2 with a risk warning for stolen assets.

Odaily Planet Daily reports that SlowMist issued a risk warning regarding asset theft in FomoPeek App versions 1.1–1.2, stating that they have recently received multiple reports of user assets being stolen. Verification revealed that all incidents involved private key leaks, with some users having downloaded and used FomoPeek versions 1.1–1.2. Joint analysis by the SlowMist & OKX security teams confirmed clear evidence that malicious code had been implanted in the application. In addition to normal business functions, the application bundles two modules unrelated to business operations, including a professional iOS kernel attack framework integrating eight exploit schemes. This framework can automatically select the attack method based on the device model and system version (affected iOS versions: iOS 12.0–18.7, 26.0–26.1). Upon successful attack, the application can bypass the iOS sandbox isolation mechanism, thereby reading and decrypting the system keychain and accessing data files of other apps on the device. Users' private keys, mnemonic phrases, login credentials, chat logs, and files stored on their devices may all be at risk of being leaked. Furthermore, this application connects to covert servers unrelated to public business operations to receive remote commands. Intercepted plaintext communications indicate that its attack capabilities are currently enabled and will execute automatically periodically. The lower the iOS version running on your device, the higher the potential risk. If you have ever downloaded or used this application, please immediately: check your account assets and private key security; create a new account and generate a new key on a secure device that has not previously installed the application; transfer your assets to the new account as soon as possible; update to the latest iOS version; and do not continue using or reinstall the application. If you discover any unusual asset activity, please immediately contact the relevant platform's official customer service and preserve your device and related evidence for further investigation.