Malicious Themes Target iPhones to Steal Crypto Wallets

A campaign has been identified where 13 malicious Composer theme packages on Packagist exploit vulnerabilities in iPhones to steal cryptocurrency wallet seeds. The attack primarily affects users visiting Vietnamese movie and comic streaming websites that have incorporated these trojanized themes. Once installed, the harmful JavaScript code embedded in the themes is executed on the devices of mobile users, leading to spyware installation, gambling redirects, and ad fraud. The attack vector leverages Composer, a tool commonly used by developers to manage website components. This exploitation specifically targets iPhone users, raising concerns about the security of cryptocurrency wallets. As of now, the full scope of the impact is still being assessed, but the malicious themes pose a significant risk to mobile users. Users are advised to avoid installing themes from untrusted sources and to ensure their devices are updated.

Key Points: • 13 malicious Composer themes exploit iPhone vulnerabilities. • Attack targets mobile users on Vietnamese streaming sites. • Spyware and crypto wallet theft are primary objectives.