A new warning for iPhone and Apple product users

[Ketesnuko]

Disable iCloud automatic backups in your iPhone or apple product if you are running any crypto wallets on the phone, why? iCloud will make your encrypted vault password available online, meaning if someone or an hacker phishes your ICloud credentials your fund will vanish into thin air.

[1714319799]

1714319799

[1714319799]

1714319799

[1714319799]

1714319799

[1714319799]

1714319799

[Cookdata]

The idea of Icloud storage is only good gallery and Media, passwords private keys and seed  phrase or recovery seed shouldn't be store in such places.
I was going through the tweets thread and my mind was a bit scared with things I have been hiding on my Icloud right before I took my privacy serious. So I checked my Icloud and there was an Altcoin wallet I installed back then and ignorant me, I backedup the private key to the Icloud( the developers enable the option backup to my private key to Icloud).



The wallet was no longer on my phone and I decided to installed the app on my device to test the magic. I installed  the app, I allowed the face ID and the next thing that pop up was the options to login with my previous account or to import new account. The app had access to my Icloud.



I selected the previous account and that's was how my previous staking transactions pop out, there was no nothing in the wallet as I have already sent them back to an exchange.

I have did one thing with the Icloud backedup private keys....DELETE



The data has been deleted from my cloud. Such things are not meant for any third party, it should only be on your custody, you can mistakenly lose your password to another person, your Apple ID AND PASSWORD will make you loss everything, including privacy once  anyone has access to them.
You can see the amount of stolen ethereum that was announced by Metamask, is possible that such exploit is still going on. while Apple has promised you that your data are encrypted, note anything encrypted can be decrypt.
Stay safe.

[lovesmayfamilis]

The data has been deleted from my cloud.

And do you now really believe that everything that you decided to delete has been deleted? It's the internet, mate. Everything that fell into the clutches of the iPhone and Apple is never deleted. They just give you the illusion of security, nothing more. Surveillance and more spying on users, that's the motto of this company.

[Cookdata]

And do you now really believe that everything that you decided to delete has been deleted?

Only the uninformed will believe Icloud to be a preserve place for security. Delete may not be the best measure but I want my mind to out of that place and any sensitive data. I don't have anything on the private keys, the least I worry now is the privacy I have exposed but that's fine. I wish internet could have futures to disable many things.

[Daodex]

The data has been deleted from my cloud.

And do you now really believe that everything that you decided to delete has been deleted? It's the internet, mate. Everything that fell into the clutches of the iPhone and Apple is never deleted. They just give you the illusion of security, nothing more. Surveillance and more spying on users, that's the motto of this company.

Yes you are right, you can even recover all deleted files on iCloud, that means that anyone that have access to your iCloud account can still try to recover deleted files from that same account, its not recommendable to use iPhones to store recovery seeds and private keys, I won't even dare open a trust wallet on such platform.

[asriloni]

I do know that and i never enable icloud caused by this potentially fucked me when i didn't aware if my password or a sensitive data gets stored into my icloud. The best way to store your media but it's not for your data. I personally always disable any cloud storage when i will be using this device to store my data caused by it's all a very important data for sure. Even when it says already deleted but yeah apple is having your data permanently.
In my opinion if this is a very bad thing to be enabled when someone decide to use apple device as his main desktop to work.

[Cryptomiles1]

If iPhone could be that dangerous why not get and android phone for any mobile wallet installation or windows to slime the chances of being hacked and compromised device. most at time we don't have to allow autosave maybe could be one bad thing will happened us whereby user data could be fitch and empty their wallets.

[youdacapt]

If iPhone could be that dangerous why not get and android phone for any mobile wallet installation or windows to slime the chances of being hacked and compromised device. most at time we don't have to allow autosave maybe could be one bad thing will happened us whereby user data could be fitch and empty their wallets.

The reality is that there is nothing wrong with metamask on ios, or ios itself. The core problem is that people are not protecting their crypto currency wallets as they ought too. They call is seed phrase, paper wallet with an instruction that says store it where no one else can see it; why upload your seed phrases to cloud storage ? Clipboard storages are well prohibited, but we see guys who pin private keys to their clip board too. either android or ios, keep your seed phrases far from cloud storage

[malcovi2]

If iPhone could be that dangerous why not get and android phone for any mobile wallet installation or windows to slime the chances of being hacked and compromised device. most at time we don't have to allow autosave maybe could be one bad thing will happened us whereby user data could be fitch and empty their wallets.

The reality is that there is nothing wrong with metamask on ios, or ios itself. The core problem is that people are not protecting their crypto currency wallets as they ought too. They call is seed phrase, paper wallet with an instruction that says store it where no one else can see it; why upload your seed phrases to cloud storage ? Clipboard storages are well prohibited, but we see guys who pin private keys to their clip board too. either android or ios, keep your seed phrases far from cloud storage

People arent really that tech savy most of us will learn the hard way. I also started in crypto by saving my bitcoin private key on gmail.

I also used exchanges as my personal wallet most of us dont even know how to avoid viruses.

[Reid]

Never use the Cloud for saving anything that has connection with assets and money. I learned about that Cloud with a friend who is looking for help to fix his Iphone. I tried and was surprised I could see all his passwords just by opening the Cloud. It's not safe, I'd rather stick with my Android and use a memory device to save some information but still never the passwords.
The best option is to write it down and burglary will be the only thing you should be worried about in case they know you own cryptos.

[ardydyon]

online storage "Icloud or anything" related to digital assets is indeed very dangerous if it is successfully hacked.
never use the cloud to store crypto-related assets. or store in any cloud that is online data storage.
it is better if the password or password is stored offline, that is, by writing it in a book or small note that you keep in a safe place that only you know.
stay alert and be careful storing keywords.

[JeffBrad12]

Once you enable automatic function to store your data to the icloud and this will become a disaster for sure. thank you for OP as this thread is very useful for anyone. As long as someone can keep their icloud securely and that will be fine if he was storing his data into the icloud but when he can't keep it secure and this will become a horrible thing for sure as his data may be downloaded by hacker and then it will be hacked. All of money in the wallet will be stolen. It's better to store any data into the offline hardware

[coupable]

Due to security leak in MetaMask, someone lost $650,000 worth of NFTs in a phishing attack : https://twitter.com/revive_dom/status/1514751885126914051
The full story was published days ago : https://watcher.guru/news/metamask-warns-apple-users-as-a-man-lost-650000-in-a-phishing-scam
The most impressive part is that there is no reply from Apple company about this Metamask warning. Neither from MetaMask team as well who should be aware about the case.

[vv181]

Disable iCloud automatic backups in your iPhone or apple product if you are running any crypto wallets on the phone~

You didn't post the tweet fully which includes the way to disable it.

Here is the full reference:

🔒 If you have enabled iCloud backup for app data, this will include your password-encrypted MetaMask vault. If your password isn’t strong enough, and someone phishes your iCloud credentials, this can mean stolen funds. (Read on 👇) 1/3

You can disable iCloud backups for MetaMask specifically by turning off the toggle here:
Settings > Profile > iCloud > Manage Storage > Backups.
2/3

If you want to avoid iCloud surprising you with unrequested backups in the future, you can turn off this feature at:
Settings > Apple ID/iCloud > iCloud > iCloud Backup
3/3

iCloud will make your encrypted vault password available online, meaning if someone or an hacker phishes your ICloud credentials your fund will vanish into thin air.

I think not strong enough Metamask password also plays its parts here. In the first scenario, if some users got their iCloud creds leaked, it is safe to say that likely the user didn't have a good enough security awareness. I won't be surprised if both credentials have similarities.

while Apple has promised you that your data are encrypted, note anything encrypted can be decrypt.

The word of promise and encryption itself is contradictory. After all, we can't be sure that Apple didn't have any master key for their products

[ryzaadit]

-snip-

What are you talking about? any material support this case ?

The suspect of this case, is mostly brute force data or phishing. Example brute force data, while you have the same information (one for all) like your password. So, example some marketplace getting data breach.

The buyer data, can tested to different platform to see if user also set up a same password for other too.

[wxa7115]

The data has been deleted from my cloud.

And do you now really believe that everything that you decided to delete has been deleted? It's the internet, mate. Everything that fell into the clutches of the iPhone and Apple is never deleted. They just give you the illusion of security, nothing more. Surveillance and more spying on users, that's the motto of this company.

This is correct, it is because of this that any sensitive information should never be stored in a smartphone, at least with a Desktop PC there are some OS that do not have integrated spyware or bloatware that you do not need or want.

Apple is infamous for storing information their users never wanted to share to begin with, so while a mobile wallet could make sense as a wallet in which you keep a small amount of capital to spend online, it must never be the main wallet in which you store your coins or from which you make important movements since it is simply impossible to secure it properly.

[jrrsparkles]

Encrypted data? Then what is the point of encryption at all and this is another proof to the Apple lovers to realize it is also not safe and no matter anything is 100% secure when its connected to internet. Is there any reply from the Apple company about this Metamask warning?

[Mahanton]

Disable iCloud automatic backups in your iPhone or apple product if you are running any crypto wallets on the phone, why? iCloud will make your encrypted vault password available online, meaning if someone or an hacker phishes your ICloud credentials your fund will vanish into thin air.

Thanks for sharing up!

Pretty much sure that there are lots of users of Iphone arent really that mindful about having that icloud back up but honestly bypassing someones password of your Icloud credentials isnt something that
easy to be done therefore i dont really mind much about security issue about this but its better to be safe than sorry.Its never been good on making out some storage of your coins or assets
on a mobile phone specially if we do talk about large sums because you wont know on what would happen next.

[yhiaali3]

Thanks for the warning, this is very important. You should not store any important data on the Internet, even if it is encrypted, because this is very dangerous and can expose your data to hacking and stealing your wallet and accounts. Personally, I do not store any data on the Internet, but I write it on paper and disable the feature Save data to cloud storage because it is very possible that your data storage site will be hacked and then you may lose all your assets.

[isaac_clarke22]

Whenever I hear the word "cloud", I always steer clear any means to access my money from it. I won't even include my personal information to it, even if they claim that they do not access whatever you store there.
Always remember that if a platform is being managed or was coded by somebody, assume that you are willing to give them whatever you put it in there.