TechFlow News: On May 15, SlowMist’s Yu Xian stated that they have obtained some in-the-wild attack samples. It is currently confirmed that the attacks primarily target iPhone users running outdated iOS versions, Safari browser users, and individuals holding cryptocurrency wallets. He noted that malicious JavaScript exploit code may be embedded in phishing websites impersonating adult live-streaming platforms, TRON Energy Stations, refund processes, or vulnerability alerts. If users of older iPhone models open such websites via Safari and leave them open—while simultaneously unlocking their wallet apps in preparation for use—their plaintext private keys could be stolen.
Add to Favorites
Share to Social Media
