Public service announcement for Metamask users, Apple IOS IpadOS versions

[bbc.reporter]

Disable icloud automatic backups for Metamask or turn off icloud backups to avoid unrequested backups for the data in your device. Also login to your icloud.com account to see which of your data have been uploaded without your knowledge. You might have personal selfies that you do not want others to see hehehehe.



If you have enabled iCloud backup for app data, this will include your password-encrypted MetaMask vault. If your password isn’t strong enough, and someone phishes your iCloud credentials, this can mean stolen funds.

Read in full https://mobile.twitter.com/metamask/status/1515727239391809536?s=12

[masterrex]

It's very alarming but it's also a wake-up call for everyone especially the iPhone users damn it there is no safe space nowadays even a well-known brand like iPhone is not spare from this security threat so its time to take some review on our phone security setup because the breach happens already in the iCloud backup so I think the vulnerability is there so it's a high time to look at it to prevent the Metamask incident to happen again. 

[bbc.reporter]

@masterrex. Agreed. For those users who underestimate this and think that this will not happen to them, be careful because this type of attack has a victim already. Where the floor prices presently are for MAYC, there might be more than $200k in NFTs stolen from this user.



Hey y’all, let’s see how amazing this community can be. My entire wallet was just stolen. Totally wiped out, MAYC 28478, MAYC 8952, MAYC 7536

Gutter cat 2280 , 2769, 2325
Also stole 100k in ape coin.
Looking for all the help I can get.

100kreward 
@BoredApeYC @GutterCatGang

This is how it happened, Got a phone call from apple, literally from apple (on my caller Id) Called it back because I suspected fraud and it was an apple number. So I believed them
They asked for a code that was sent to my phone and 2 seconds later my entire MetaMask was wiped

Source https://mobile.twitter.com/revive_dom/status/1514751885126914051?s=12

[Jating]

Yeah, this is a good advice and we all know that it is not safe to back up any private keys or mnemonics on Icloud.

I just check everything last January and then last month to see what I have back up and it seems there is no data that can compromise my machine. So for us who are beginners or even experience once to do some regular check on everything because we might have inadvertently back up something that is very important, not just crypto related items on our Icloud.

[cryptoaddictchie]

So even apple get compromised too. Thats too scary since a lot of people are probably using their iphone for using crypto. When I saw the news, Ive easily contacted my friends to do the necessary things to avoid this since I think 4 to 5 of my friends are using apple and they are heavily invested on some tokens, its gonna be heartbreaking if they will experience hacked due to apple compromise situation.

[Bitstar_coin]

Damn! That's some serious shit right there, although am not an apple user but I can spread this to friends who are apple users and in crypto. This can save someone from being scammed for their assets.
Sometimes when you see personal wallet get hack it is through ways like this that may not seem dangerous but they are I'm reality.
Thanks for this info, I think many people will benefit from this.

[cryptomaniac_xxx]

So even apple get compromised too. Thats too scary since a lot of people are probably using their iphone for using crypto. When I saw the news, Ive easily contacted my friends to do the necessary things to avoid this since I think 4 to 5 of my friends are using apple and they are heavily invested on some tokens, its gonna be heartbreaking if they will experience hacked due to apple compromise situation.

If I'm not mistaken it's their cloud service that is being compromised. Nevertheless, this is still very dangerous for us because there is this notion that Apple security is much better as compare to Android or any other OS.

However, we all know that it is not good to put your back up in cloud, it's not a good practice. Better to really just write down and safe in somewhere is that is not digital.

[MFahad]

I have been victim of these kind of hacking
 I bought new Mob 8 months ago and did not restore factory my device. I opened all Gmail and other personal info this device. After 4 month passed my all wallet hacked but I did not  come to know that time and now 20 days ago again my all new wallet also hacked and even my telegram and twitters account hacked then I realize it's problem with mob which ja d cloud backup

[Jackl87]

Disable icloud automatic backups for Metamask or turn off icloud backups to avoid unrequested backups for the data in your device. Also login to your icloud.com account to see which of your data have been uploaded without your knowledge. You might have personal selfies that you do not want others to see hehehehe.
If you have enabled iCloud backup for app data, this will include your password-encrypted MetaMask vault. If your password isn’t strong enough, and someone phishes your iCloud credentials, this can mean stolen funds.
Read in full https://mobile.twitter.com/metamask/status/1515727239391809536?s=12

I only use Metamask as a browser add-on on my PC because i just feel much safer this way. I am working playing on PC's for more than 20 years now and therefore i think that i am pretty safe there because i know what kind of things that i need to do and what kind of things i have to avoid in order to be safe and to not get ripped off or scammed. Even though i have a phone of course i only use it for important stuff (like banking or for crypto wallet) if there is no alternative available for PC,  because i just don't feel as safe with a phone then with a PC. You can lose your phone anywhere and i just don't know how good the antivirus and other protection software for phones are.

[Lagduf]

I honestly always thought that using iphone is significantly a lot more secure than using android but it seems that was wrong, I guess it’s because iphone aren’t really designed for this kind of use I guess
instead iphone is more focused for producing contents like vlogging and also social media, if it’s for things like saving up cryptocurrency assets it just doesn’t do the justice of securing the key of the investment assets.