A new warning for iPhone and Apple product users

[passwordnow]

It is the reason why people shouldn't be saving their keys in a cloud storage. A lot must learn from this that if you ever save your keys or seeds on the cloud, you're really prone to this even the software or system you use is very secured. There's always a possible flaw and hole in these systems that would really be able to target those important details or screenshots of your keys. This common act is making these hackers aware of what they must do through social engineering.

[1715519570]

1715519570

[Yogee]

The Metamask team should monitor the effects of certain apps or features in all types of phones. This may not have been discovered it there wasn't a victim. Poor lad losing all that money but it's also his fault for not using more secure wallets.

[zonefloor]

Actually, it's not just for iCloud. Applies to all cloud backups. I pay attention to the people around me, they provide everything from their photos to password backups on cloud uploads. But hijacking these accounts means stealing everything that belongs to you at once. That's why I put both encryption and fingerprint recognition on all my wallet applications. I write down private keys in a notebook and then I do not use these keys anywhere unless necessary. I recommend this to you too.

[SistaFista]

Isn't the metamask password has been encrypted ? How about other wallets on my phone ?
For example i use trust wallet on my phone, will icloud automatically save the credential of my trust wallet too ?
We should be able to setting the cloud backup so not all the data in our phone automatically getting uploaded to the cloud.

[MrDave]

So, basically never use any cloud storage to store anything regarding money and related data. It is not safe anyway, they are easily hackable, so quite risky.

[joeperry]

Thank you for sharing this one, I already disable it a year ago I am not really fan of any automatic online backups since I am not comfortable storing my information or any of my files online and we are not sure whether that website or storage is safe or not including the dropbox of the Apple.

[kaya11]

Are there any similar case for android users? This should be  at the top of discussion, most users are android and installed Metamask on their phones. Oh my, I was planning to buy an Iphone, icloud is a very nice features especially when you've lost your apple gadget. I wouldn't dare to turn it off, I was using iphone way back before I entered crypto but I am not aware of this until now.

[Tony116]

Isn't the metamask password has been encrypted ? How about other wallets on my phone ?
For example i use trust wallet on my phone, will icloud automatically save the credential of my trust wallet too ?
We should be able to setting the cloud backup so not all the data in our phone automatically getting uploaded to the cloud.

You better turn off auto backup on your phone and never give OTP to any stranger. The victim in this case is he has backed up everything on iCloud and he gets a request to change his apple id password. He carelessly did not check carefully and gave the OTP code to the hacker, the hacker accessed the victim's iCloud and stole the metamask data.

As long as you don't give your password or OTP to anyone, including support staff from the company. You will still be safe, but it is best to buy yourself a cold wallet to ensure safety.

[Lagduf]

this is great information basically it helps many of us that doesn’t even have a clue that apple is literally keeping our passwords in their service from losing our assets.
just imagine someone saving up their investment in wallet using apple products and turns out the asset gone just because apple is trying forcing their service, I think if i remember correctly android also saves some password in their service but I could be wrong since I haven’t used android anymore for quite sometimes but I know that gdrive is kinda similar with apple iclouds. regardless i think these service providers like the big company apple and google should give options for usage of their service and gives warning beforehand.

[Ezravdb]

Isn't the metamask password has been encrypted ? How about other wallets on my phone ?
For example i use trust wallet on my phone, will icloud automatically save the credential of my trust wallet too ?
We should be able to setting the cloud backup so not all the data in our phone automatically getting uploaded to the cloud.

Mobile wallets can also have additional fingerprints and password patterns for security, as well as metamasks which can also add additional security to your PC or laptop.
So there is no need to worry about this because there has never been any problem so far related to it.

[Munir575]

Different varieties of scam coming in everyday i hope no one falls victim to such scam. Thanks for the information i know it will be of help to the members of the forum. Saving passwords online is really not safe.

[savetheFORUM]

The Metamask team should monitor the effects of certain apps or features in all types of phones. This may not have been discovered it there wasn't a victim. Poor lad losing all that money but it's also his fault for not using more secure wallets.

I don’t think we have to blame Metamask in a situation like this. It’s really not their fault, because this is just like having a malware on your computer or phone that is stealing every information that you input. So, the developers really can’t tell that there is such thing, but they will do their best in making sure that their wallet is secure, but for a situation like this, I don’t think that it is something that we would all have to be blaming the developers.

We as the users really have to be careful and make sure that we maintain the top practices in ensuring the safety of our assets. Everything shouldn’t be the work of a developer, you as the user also have to play your own part in securing your wallets.

[dezoel]

Disable iCloud automatic backups in your iPhone or apple product if you are running any crypto wallets on the phone, why? iCloud will make your encrypted vault password available online, meaning if someone or an hacker phishes your ICloud credentials your fund will vanish into thin air.

I do not make use of an iPhone, but I do have a lot of my friends who are into making use of iPhone. For now I am making use of Android phone and I do make use of Google backup for backing up files on my phone, but it is mainly just pictures and videos and I do not use it for any other thing. And also my backup is not set to being automatic, it is set to manual and I choose what I want to backup and the things I do not want to.

It is good that such information is passed, at least those of us who are making use of iPhone or has friends and families that are making use of iPhone and they’re into cryptocurrency, we would all let them know about this so that they would all be very careful with what they are backing up to their iCloud. These days we all really have to be careful.

[ven7net]

Disable iCloud automatic backups in your iPhone or apple product if you are running any crypto wallets on the phone, why? iCloud will make your encrypted vault password available online, meaning if someone or an hacker phishes your ICloud credentials your fund will vanish into thin air.

Thanks for the warning, but the question arises, how could this have come to this? Wasn't this vulnerability previously known? Whatever it was, but security has always been, is and will be the most important thing, especially when it comes to the security of our funds and assets. On the other hand, this may be a bad reminder for all cryptocurrency users that we still don’t know much and new surprises may lie ahead of us. It is surprising that this vulnerability was discovered for the iPhone and Apple, because it could undermine their importance and credibility in the market.

[vv181]

Isn't the metamask password has been encrypted?

According to https://decrypt.co/98078/metamask-warns-users-apple-icloud-phishing-scam, the funds are lost within two seconds. This makes me wonder whether the victim is saving plaintext seed phrases on Metamask or not. Metamask itself is saying that indeed the backed-up application data is encrypted.
 

How about other wallets on my phone ?
For example i use trust wallet on my phone, will icloud automatically save the credential of my trust wallet too ?.

It's likely that iCloud backup may also include sensitive information: Refer to https://support.apple.com/en-us/HT207428

We should be able to setting the cloud backup so not all the data in our phone automatically getting uploaded to the cloud.

You can disable the iCloud backup feature and the app data backup.

See:

🔒 If you have enabled iCloud backup for app data, this will include your password-encrypted MetaMask vault. If your password isn’t strong enough, and someone phishes your iCloud credentials, this can mean stolen funds. (Read on 👇) 1/3

You can disable iCloud backups for MetaMask specifically by turning off the toggle here:
Settings > Profile > iCloud > Manage Storage > Backups.
2/3

If you want to avoid iCloud surprising you with unrequested backups in the future, you can turn off this feature at:
Settings > Apple ID/iCloud > iCloud > iCloud Backup
3/3

[wxa7115]

Whenever I hear the word "cloud", I always steer clear any means to access my money from it. I won't even include my personal information to it, even if they claim that they do not access whatever you store there.
Always remember that if a platform is being managed or was coded by somebody, assume that you are willing to give them whatever you put it in there.

What happens is that people get deceived very easily by the marketing, the cloud is just a nice sounding name for letting someone else to store your data for you, and this is a huge mistake because as we know those services are always targeted by hackers.

And even if the security they can provide may seem adequate hackers always find a way around it and we can lose sensitive information like our seed words or private keys, so people need to think twice about enabling those services, I do not recommend anyone to have their main wallet in one of those devices as securing your coins is simply too difficult in a device that is full of secret backdoors.

[crzy]

Disable iCloud automatic backups in your iPhone or apple product if you are running any crypto wallets on the phone, why? iCloud will make your encrypted vault password available online, meaning if someone or an hacker phishes your ICloud credentials your fund will vanish into thin air.

Didn’t aware of this one, though upon checking I only save pictures on the iCloud luckily saw this one and I might disable it now and get my photos back on a safer place. This is why we should always read the terms and conditions, most probably its written there and we are no just paying attention about it.

[Ziskinberg]

The data has been deleted from my cloud.

And do you now really believe that everything that you decided to delete has been deleted? It's the internet, mate. Everything that fell into the clutches of the iPhone and Apple is never deleted. They just give you the illusion of security, nothing more. Surveillance and more spying on users, that's the motto of this company.

With that, well we can never do nothing about that. If we can use other smart phones aside from iPhones and Apple, that way we will feel safer and more secured. However, always remember that even if we get to use other than iPhones and Apple, there will always be hackers that will always try to steal whatever we have in our wallet. Being responsible for the security of our own account is always the key not to fall a victim for this.

[Ebede]

Different varieties of scam coming in everyday i hope no one falls victim to such scam. Thanks for the information i know it will be of help to the members of the forum. Saving passwords online is really not safe.

People is getting scammed every day and the to reduce of scam will be hard before some people have taken it as choice of life and it will be very bad to remove it from their blood any information of scam suppose to be spell out to serve another people not to be victim of the the issue some people. Yes it is good make people not fall victim

[X-ray]

Just put it off from your iphone. Icloud was so bad as this is storing almost all of data that available to be stored from our iphone. I think that our icloud has small potential to be breached by the hacker. We do know that how good the security of our icloud and as long as we can save our phone properly and our data will not be hijacked by others or hacker.