FomoPeek iOS Malware Linked to $580K Crypto Theft

| cointelegraph.com
FomoPeek iOS malware was linked by SlowMist to nearly $580,000 in stolen USDT. Versions 1.1 and 1.2, released through Apple’s App Store on Sept. 9 and Sept. 12, contained kernel exploits that could escape the iOS sandbox, gain elevated privileges and access sensitive data from other apps. Working with OKX’s security team, SlowMist found that FomoPeek loaded a remote-controlled exploit framework at launch. The framework targeted wallet and notes applications, including MetaMask, Trust Wallet, SafePal, OKX Wallet and Apple Notes. SlowMist confirmed that the app could collect application data, but did not establish that private keys or seed phrases were extracted from every named wallet. On-chain analysis identified a main hacker address that received about 579,984 USDT across multiple networks. Some funds were sent toward FixedFloat, KuCoin and cce.cash. FomoPeek version 1.3, released on Sept. 17, removed the malicious modules. Users who installed FomoPeek 1.1 or 1.2 should treat all wallet credentials accessible from the affected iPhone as compromised. SlowMist recommends creating a new wallet on a clean device and transferring assets immediately. Uninstalling the app or enabling iOS Lockdown Mode cannot recover data already exfiltrated. The FomoPeek incident highlights the risks of App Store crypto malware and the need for hardware wallets, isolated devices and rapid private-key rotation.
Neutral
The incident is directly linked to wallet security and stolen USDT, not to a fundamental change in USDT’s reserves, utility or market demand. As a result, the immediate price impact on USDT is likely to be limited and neutral. Short-term trading activity may see isolated selling, address blacklisting, exchange monitoring and temporary liquidity concerns around the stolen funds, but these effects are unlikely to move the broader USDT market materially. The longer-term impact is mainly on crypto security sentiment rather than token prices. Users may shift assets to hardware wallets, rotate private keys and reduce exposure to App Store wallet applications. Such responses could briefly affect flows among exchanges and self-custody platforms, but similar security incidents have historically produced limited sustained price effects unless they involve a major exchange, systemic protocol failure or loss of confidence in an asset’s backing.