A recent revelation by a SlowMist security researcher has highlighted a new type of attack aimed at cryptocurrency holders using Apple devices. The researcher disclosed that a malicious phishing program has been detected on the Apple App Store which he described as the newest form of attack targeting Apple IDs.
Cryptocurrency users have been warned to be particularly cautious as many of them rely on iCloud to back up their wallets. This is because, in the event of an attack, their assets could be at risk of loss if their 2FA gets compromised.
The malicious phishing program is able to do this by replicating normal applications. And subsequently, the attacker adds their own number to the trusted two-factor authentication list, thereby gaining control over the account permissions.
Phishing stands as a significant threat among numerous crypto scams, posing a considerable danger to the entire cryptocurrency community. In phishing attacks, malicious actors employ deceptive techniques to trick users into revealing sensitive information, such as private keys, passwords, or seed phrases, with the aim of gaining unauthorized access to their cryptocurrency wallets and funds
Vulnerabilities Found In iOS And MacOS Platforms
Online forum users have also reported experiencing phishing attempts despite having 2FA in place. Additionally, cybersecurity firm Kaspersky identified vulnerabilities in the iOS and macOS platforms, posing a risk of crypto asset loss.
These security flaws enable attackers to obtain user details and root privileges, which SlowMist later verified that the identified vulnerabilities were present in both operating systems.
Both SlowMist and Kaspersky have now urged users to update their iOS and macOS devices to safeguard against these potential risks. This warning is coming shortly after Kaspersky’s disclosure that crypto phishing attacks surged by 40% year-over-year from 2022 to 2021, indicating a higher risk of being compromised for crypto users.
MetaMask Issued Prior Warning On Crypto Phishing Scams
SlowMist and Kaspersky are not the only ones that have issued warnings about phishing scams as MetaMask issued a prior warning about the potential use of Apple iCloud backups as a phishing tool. This cautionary message followed a reported incident where an Apple user allegedly lost $650,000 worth of digital assets from their MetaMask wallet.
In April 2023, the wallet provider alerted Apple users about the risk associated with automatic iCloud backups of their MetaMask wallet data, specifically highlighting that it could lead to their seed phrases being stored online.
To access the wallet, one requires a ‘seed phrase,’ which essentially functions as the password and one of the essential precautions is setting a strong and secure password.
Metamask’s warning notified users who hadn’t modified their default device settings that they might risk losing their funds if they failed to implement essential security measures.
The total crypto market cap was at $1.13 trillion on the one-day chart | Source: TradingView
ByteDance is expanding its AI efforts with Doubao, a chatbot now capable of generating realistic videos from text and images. This move strengthens ByteDance's position in China's fast-growing AI market, though it faces tough competition from rivals like Kuaishou.
WeatherlyA South Korean court upheld a bank’s decision to fire an employee for “habitual” crypto gaming and improper private money lending to clients, uncovered in an internal audit. The employee appealed, claiming the dismissal was unjust.
KikyoFour foreign nationals were arrested in Thailand for a robbery on 8 November, where they forced a Ukrainian tourist, Viacheslav Leibov, to transfer 250,000 USD in cryptocurrency. The suspects, who had prior connections to the victim, were charged with armed robbery, unlawful detention, and coercion.
WeatherlyDespite over 50% drop in TON’s TVL since July, Bitget Wallet and Foresight Ventures are reinforcing support for Telegram’s Mini App ecosystem with a $20 million grant to boost growth and innovation.
CatherineAlameda Research has filed a lawsuit against Waves founder Aleksandr Ivanov, seeking to recover $90 million allegedly lost in fraudulent transactions involving the Waves token and Vires.Finance. The lawsuit claims Ivanov inflated the value of WAVES while siphoning funds from Vires, and later failed to cooperate in attempts to recover the assets.
AnaisThe Vatican has unveiled an AI-driven digital twin of St. Peter's Basilica, developed with Microsoft and Iconem to enhance visitor management and preservation. Pope Francis supports AI’s potential but emphasizes ethical, responsible use as a bridge to the future.
CatherineThe FTX bankruptcy estate claims SBF’s $1.76 billion repurchase deal with Binance in July 2021 was a fraudulent transfer due to FTX’s insolvency. The lawsuit seeks to recover billions for FTX creditors, alleging the transaction was fraudulent.
KikyoTether’s WDK toolkit offers an open-source, self-custodial solution for creating BTC and USDT wallets for both humans and AI. Scalable and modular, it supports platforms from mobile to robotics, with future updates bringing UI templates and multi-blockchain support for Tether-backed stablecoins.
CatherineIn Thailand, armed robbers forced a Ukrainian man to transfer $250,000 in USDT under threat. They restrained him and warned against reporting the crime before fleeing. Thai police soon arrested four suspects, including a regular USDT buyer from the victim.
KikyoHuangzhou-based Nano Labs saw a slight share price increase after announcing it will accept Bitcoin as payment for its products and services.
Catherine