Malicious iPhone App Stole Crypto Keys for Days Before Discovery
A rogue App Store app secretly harvested crypto private keys and seed phrases, prompting Binance to warn iPhone users.
A malicious application that slipped through Apple's App Store review process spent more than a week quietly targeting cryptocurrency users before security researchers identified the threat, according to a warning issued by Binance. The app was engineered to extract some of the most sensitive data in the crypto world: private keys and seed phrases, which function as master passwords granting complete control over a user's digital assets.
The breach raises pointed questions about the durability of Apple's longstanding promise of a tightly controlled, curated app marketplace. Apple has historically positioned its App Store as fundamentally safer than open-distribution alternatives, a selling point particularly valuable to users handling financial assets. The fact that code capable of harvesting crypto credentials persisted undetected for over a week suggests that even sophisticated review mechanisms have exploitable blind spots — whether through obfuscation techniques, delayed payload activation, or other evasion methods.
Read more Does a Stay-at-Home Spouse Get Half Your Retirement in Divorce? →
For cryptocurrency holders, the stakes are uniquely severe. Unlike a compromised bank password, a stolen seed phrase cannot be reset or invalidated. Whoever obtains it gains irreversible, unchallenged access to every asset in the associated wallet. Binance's decision to issue a public advisory signals the exchange's concern that affected users may not yet understand the permanence of the exposure they face.
The incident is a timely reminder that supply-chain and platform-level threats are increasingly targeting the crypto sector, where self-custody of assets places the entire security burden on individual users. Security researchers and exchanges alike have been urging holders to store seed phrases exclusively offline and to treat any application requesting such information as inherently suspect, regardless of where it was downloaded.
Continue reading at Yahoo.
