Loading...
[Yuxian: ComeCome Food Delivery App Embeds Malicious SDK, Similar to FomoPeek] SlowMist founder Yuxian revealed that the ComeCome food delivery app has embedded a malicious SDK, employing methods similar to the FomoPeek cryptocurrency theft incident. The FomoPeek app contained a malicious SDK that integrated eight iOS kernel exploit techniques, which, upon successful attack, could bypass the iOS sandbox mechanism to steal crypto wallet assets. Yuxian advises users to update to the latest iOS version and remain cautious of apps from unknown sources.