Security warning for users who downloaded FomoPeek

[DesmondHayes]

Iphone and Ipad users can be compromised regarding the Binance wallet by crypto tracking app FomoPeek; if someone downloaded versions 1.1 or 1.2 you should immediately stop using it and check Binance wallet.
Below is an official warning from Binance administration:

[DesmondHayes]

My apologies if this warning isn't in the right thread.

[Z-tight]

Imagine downloading an application just to monitor 'whales' freely moving their coins, only to lose yours in the process, because a data-stealing malware was embedded in this system, it doesn't get more crazy that this. I've never heard of this application before now and i have never seen the need to actively monitor when others move their funds, even if it's large tx's.

However, this is not just about Binance alone. The flaw was flagged by SlowMist, and anybody who has installed this aplication should take action immediately and move their funds to a new wallet.

[PX-Z]

Hmmm, so this is another issue of appstore allowing malicious apps on their platform?

i have never seen the need to actively monitor when others move their funds, even if it's large tx's.

If you're an android user, probably this won't ring a bell, i just found out this app too and it only market iphone users.

Report says it uses "Kernel-level exploitation" which is why it got access to other app/wallet and was able to send those funds out. That's another level of exploitation imo.

[Yamane_Keto]

They did not specify the extent of the potential damage, but since they requested that funds be moved to a new wallet, it implies the hacker has gained full access to the seed phrase.
Does the warning cover Binance app and all associated services?

[DesmondHayes]

They did not specify the extent of the potential damage, but since they requested that funds be moved to a new wallet, it implies the hacker has gained full access to the seed phrase.
Does the warning cover Binance app and all associated services?

 

This is the also stated in their warning;



I didn´t put it in thread earlier. Now i see that I posted 2 same images .
From this warning it is pressumable that all apps, credentials, passwords, seeds on designated iphones or ipads can be breached.
How I see it Binance didn't state that the breach has happened but with this warning they are for sure exposed and I would presume that all associated services would be compromised if this app  FomoPeek is installed.

[Charles-Tim]

According to SlowMist's onchain analysis, primary hacker address associated with the incident that received about 579984 USDT. This was according to the report published about it 2 days ago.

https://www.tradingview.com/news/cointelegraph:476d4b2dc094b:0-malicious-ios-app-fomopeek-linked-to-580k-crypto-theft-slowmist-says/

It is better not to use those crypto tracking apps, most of them have their own disadvantages and this is the worst one that I have heard of that will let me prefer to be discouraging people from you them.

[retreat]

It's a bit ridiculous how Apple hasn't managed to improve the security of their App Store, even though there have been many hacking cases coming from apps on their App Store. I think at this point, we also need to be more careful with any apps we install on our devices. Even when they come from trusted sources, there's still no guarantee that they are completely safe, so users should still pay attention to the type of apps they install, and if it's not that important, then there's no need to install it.

[X-ray]

That warning at the bottom is funny because the app is literally available on App Store, a place where it's supposedly considered as trusted source and you can't side load app unless you're in EU or other few countries.

They did not specify the extent of the potential damage, but since they requested that funds be moved to a new wallet, it implies the hacker has gained full access to the seed phrase.
Does the warning cover Binance app and all associated services?

It's iOS kernel exploitation that escaped apple's app sandbox, consider the self custody wallet to be unsafe but honestly, I doubt it can gain the full access to seed phrase as easily if the user didn't store their seed phrase on notes app or screenshot it.

The self custody wallet mobile app after all, encrypt its wallet data.

The malicious app is capable to silently copy the phone's keychain and notes, if that is really the case, seed phrase saved on the device in a cleartext should be considered stolen.

[Yamane_Keto]

It's iOS kernel exploitation that escaped apple's app sandbox, consider the self custody wallet to be unsafe but honestly, I doubt it can gain the full access to seed phrase as easily if the user didn't store their seed phrase on notes app or screenshot it.

it means the user saved the private key or seed in text format, a screenshot of the words, or any other unencrypted format, and Binance wallet is supposed to store these files locally in encrypted form. If that's the case, the announcement should be public and available to all wallets.