SlowMist: Official FOMO iOS App Carried Malware Aimed at Crypto Theft

Huo Xing Cai Jing reported that blockchain security firm SlowMist issued an alert on Sept. 23, saying the official FOMO iOS app was found to include malware capable of stealing crypto assets. The affected builds were distributed via the App Store from Sept. 9 to Sept. 17. SlowMist said the malicious component shows attack behavior similar to the DarkSword malware family, with the potential to steal users' seed phrases and private keys. Because the FOMO app was promoted by crypto influencers, SlowMist warned that some users may have downloaded the compromised versions. The firm added that simply updating or uninstalling the app may not fully remove the risk. Users who installed the impacted versions should assume any related seed phrases, private keys, and sensitive credentials have been exposed and take corresponding security steps. SlowMist Chief Information Security Officer Shān Zhang has also flagged broader iOS risks, saying versions 13 through 26.5 may be exposed to malicious Safari links that exploit memory corruption flaws in WebKit and JavaScriptCore. According to Zhang, attackers could use these weaknesses to gain read/write access at the JavaScript layer, bypass pointer authentication, break out of the WebContent sandbox, escalate kernel privileges, and ultimately steal encryption keys and wallet data.