Security firm SlowMist reported that the FomoPeek iOS application was used to steal nearly $580,000 in cryptocurrency. The app, which was distributed via the Apple App Store, contained malicious modules designed to bypass iOS sandbox protections and access sensitive data from other applications.
The investigation, conducted alongside the OKX security team, revealed that the malicious versions were released on September 9 and September 12. Version 1.3, released on September 17, removed these harmful components. The exploit framework utilized eight distinct attack methods and supported iOS versions from 12.0 to 18.7.2 and 26.0 to 26.1.
SlowMist identified a primary hacker address that received approximately $579,984 in USDT. This address became active on September 15. The stolen assets were moved across multiple blockchain networks and processed through various services, including FixedFloat, KuCoin, and cce.cash, before being consolidated.
