Slow Mist Releases FomoPeek App Version 1.1–1.2 Theft Asset Risk Warning

Slow Mist has released a theft asset risk warning for FomoPeek App versions 1.1–1.2, following multiple reports from users regarding stolen assets related to private key leaks. Some users had downloaded and used this version of the app. Slow Mist, in collaboration with the OKX security team, has analyzed and confirmed that the application has been implanted with malicious code, bundling two unrelated modules, including a professional iOS kernel attack framework that integrates eight exploit schemes. This framework can automatically select attack methods based on device model and system version (affected iOS versions: iOS 12.0–18.7, 26.0–26.1). Upon successful attack, the application can bypass the iOS sandbox isolation mechanism, read and decrypt the system keychain, and access data files of other apps on the device, exposing users' stored private keys, mnemonic phrases, login credentials, chat records, and files to potential leakage risks. Furthermore, the application connects to hidden servers to receive remote commands. Intercepted communications indicate that its attack functions are active, with lower running iOS versions posing higher potential risks. Users who have downloaded or used this application should immediately check the security of their account assets and private keys. It is recommended to create new accounts and generate new keys on secure devices that do not have this application installed, transfer assets to the new accounts as soon as possible, update to the latest iOS version, and cease using this application. If any abnormal asset activity is detected, please contact the official customer service of the relevant platform and retain the device and related evidence.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.