Kucoin FomoPeek Malware Exposes Crypto Wallets on iOS Devices
Article Content
- •FomoPeek versions 1.1 and 1.2 contain malware that can steal sensitive crypto data.
- •The malware exploits iOS vulnerabilities, allowing access to data from other apps.
- •Affected users are urged to delete the app and create new wallets on clean devices.
Binance and SlowMist have issued warnings regarding the FomoPeek app, versions 1.1 and 1.2, which contain malicious code capable of stealing private keys, seed phrases, and login credentials from iPhone and iPad users. The malware exploits iOS vulnerabilities, allowing it to escape the application sandbox and access sensitive data from other apps. Users who installed FomoPeek are advised to delete the app, update their iOS, and create new wallet credentials on a clean device. The malware's exploitation framework includes eight attack methods targeting iOS versions from 12.0 to 26.1. The incident has raised significant concerns among self-custody crypto users, as attackers can control stolen assets without needing continued access to the victim's device. Binance has recommended immediate action for affected users to safeguard their assets. The situation follows multiple reports of stolen assets linked to the malicious app.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (14)
Following this threat?
Track DarkSword and Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
APT29 Targets Mobile Users with Watering Hole Campaign APT29, a Russian state-sponsored hacking group, is behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites and fake domains. The campaign, identified by Sekoia in mid-October 2026, employs multiple infection vectors, including JavaScript injection on legitimate sites… 
DarkSword Malware Targets iPhones via Compromised Websites Google's Threat Intelligence Group reported on the DarkSword malware, an exploit kit targeting iPhones running iOS versions 18.4 to 18.7. The malware exploits six vulnerabilities, three of which are zero-days, to take control of devices when users visit compromised websites. The attackers have been linked to three…