Malicious Code in iOS Ads Steals Crypto: Researchers Warn

iVerify and Senses have shed light on the way iOS ads are being used by malicious code to steal cryptocurrency. An iOS user with a vulnerable device can lose their digital assets and personal data, with no extra app installation required.

How the Attack Works: iOS Ads as a Threat Vector

The iVerify team says it starts with encountering a malicious advertisement, such as those one might see on Instagram. On an older version of iOS that is vulnerable, the harmful code will be downloaded automatically; the user does not have to do anything. A single tainted ad is enough to put your crypto and other data at risk.

With the help of malware like DarkSort and Karuna, the attackers exploit flaws in older versions of iOS. Pro Blockchain Media Live points out, however, that not every iPhone is at risk—devices that are up to date are safe from this kind of attack.

Crypto Wallets Targeted and Data at Risk

Trust Wallet, MetaMask, Phantom, and TronLink are just a few of the popular wallet apps the malware targets to siphon off funds. The goal is to obtain wallet information like the recovery phrase, or seed phrase, which would allow them to access your money.

Senses researchers have also found that the malware will search for these phrases in places beyond the wallet app, such as notes and photos, where many users tend to store their crypto details.

How Attackers Organize Crypto Theft as a Business

What iVerify and Senses have uncovered in their investigation is an operation run with the efficiency of a business. There are commission systems, partner accounts, and management panels to ensure they profit from what is stolen. It is an organized approach that makes the threat more difficult to eliminate, according to Pro Blockchain Media Live.

Protecting Your Crypto: Practical Safety Steps

For the best defense, experts recommend installing the latest version of the software on your device. Lockdown Mode is another option for those who feel at greater risk, as it limits some of the device’s functionality. Above all, do not store your seed phrase in your photo gallery or notes. With large sums involved, a hardware wallet is the only way to be sure your assets are secure.