Security News

Malicious AppsFomoPeek app found stealing crypto wallet keys on iPhoneA wallet-tracking app hid kernel exploits and remote commands. At least $580,000 in USDT was stolen.by SlowMist Security Teamon Sep 22, 2026

Latest

14 reports
NewNewThreat Lab · Sep 22Malicious App · iOSFomoPeek app found stealing crypto wallet keys on iPhoneA wallet-tracking app hid kernel exploits and remote commands. At least $580,000 in USDT was stolen.Threat Lab · Sep 22NewThreat Lab · Sep 20Malicious App · iOSComeCome food-delivery app linked to a crypto-wallet attackResearchers say attackers could remotely push wallet-stealing code after the app was installed.Threat Lab · Sep 20NewThreat Lab · Feb 5Malicious App · App StoreSparkCat scanned seed-phrase screenshots inside App Store appsOCR spyware searched photo libraries for images containing crypto-wallet recovery phrases.Threat Lab · Feb 5NewThreat Lab · Apr 2026Malicious App · iOSSparkCat returned with English-language targetingThe upgraded variant used deeper obfuscation and expanded its keyword detection to English.Threat Lab · Apr 2026NewThreat Lab · Aug 12Web Attack · SafariPoisoned web packages could compromise iPhones through SafariOpening a compromised streaming site could trigger an exploit chain without installing an app.Threat Lab · Aug 12NewThreat Lab · Mar 12Trusted App · AuthenticationMicrosoft Authenticator flaw exposed login codes and deep linksAnother app could intercept authentication data when set as the device's default link handler.Threat Lab · Mar 12NewPrivacy Lab · Feb 9Trusted App · Data ExposureAI chat app left 300 million messages publicly readablePublic Firebase rules exposed chat histories, settings and data shared by related apps.Privacy Lab · Feb 9NewThreat Lab · Feb 2026Security Research · PasswordsPassword-manager audit found 25 distinct attack methodsResearchers found design and cryptographic weaknesses across four mainstream password managers.Threat Lab · Feb 2026NewSafety Lab · May 2026Hardware Safety · LocationAirTag lawsuits highlight gaps in anti-stalking safeguardsDelayed alerts and removable speakers can make unknown trackers harder to detect quickly.Safety Lab · May 2026NewPrivacy Lab · 2024-2026Privacy Risk · SurveillanceStalkerware vendors repeatedly exposed monitor and victim dataCommercial surveillance services are often misused and have suffered repeated data breaches.Privacy Lab · 2024-2026NewPrivacy Lab · Jun 5Privacy Research · TrackingLoupe shows how apps can fingerprint users without ATTApps can combine device signals and persistent identifiers even when ad tracking is disabled.Privacy Lab · Jun 5NewThreat Lab · Feb 5App Store Risk · Supply ChainScan of 156,000 iOS apps found widespread hardcoded secretsSeventy-one percent of scanned apps leaked at least one key directly in application code.Threat Lab · Feb 5NewThreat Lab · Mar 18System Vulnerability · WebKitApple fixed a WebKit cross-origin flaw with a silent updateThe flaw could weaken isolation between tabs and embedded services in Apple system apps.Threat Lab · Mar 18NewSafety Lab · Jul 2026Social Engineering · BankingFaceTime bank-support scam used screen sharing to steal accountsCallers impersonated support staff and pressured victims to reveal passwords and one-time codes.Safety Lab · Jul 2026