- SlowMist flags malicious phishing program on Apple devices, leading to 1.6M yuan theft.
- Phishing scheme bypasses Apple’s 2FA, granting full access to user accounts.
- Malicious app imitates legitimate ones on App Store to steal Apple ID credentials.
Blockchain security firm SlowMist has flagged a dangerous phishing program lurking within an app in Apple devices that resulted in the theft of 1.6 million Chinese yuan. The malicious scheme, capable of bypassing Apple’s two-factor authentication (2FA), allowed the hacker to gain full access to user account and carried out unauthorized transactions.
注意 Apple ID出现最新攻击案例Apple store 出现恶意钓鱼程序，通过模仿正常应用程序盗取用户账号和密码，然后攻击者把自己的号码加入双重认证的信任号码，控制账号权限！
这是一个非常高明的钓鱼方法，用来绕过苹果的 2FA！
加密货币用户务必注意，因为目前有不少用户、钱包的备份方案是iCloud… pic.twitter.com/3Y9bz93NY8
— 23pds (@IM_23pds) July 25, 2023
The alarming discovery came to light when a distressed user took to V2EX, a popular Chinese online forum known for it…
The post iCloud Crypto Holders Beware; Apple User Falls Victim to Phishing Heist appeared first on Coin Edition.
The post iCloud Crypto Holders Beware; Apple User Falls Victim to Phishing Heist appeared first on Coin Edition.