iOS Flaw Puts Crypto Wallet Private Keys at Risk
Vulnerability allows malicious apps to access data stored in other Apple system containers.
A security flaw identified as worse_query affects recent versions of the iOS system. The breach allows malicious applications to access files from other programs installed on the same device. This includes seed phrases and private keys for cryptocurrency wallets stored in plain text.
Binance issued an alert to users regarding the systemic risk. The issue is classified as a sandbox escape that breaks the standard isolation between applications. The company recommends deleting apps from untrusted sources and keeping the operating system updated.
Security researchers at SlowMist confirmed that the flaw does not steal assets automatically. The danger occurs when the user installs a malicious file that exploits access to data containers. The exploitation depends on how each wallet stores its sensitive information on the device.
The developer responsible for disclosing the flaw made the code available as a proof of concept. Other developers have already created tools based on this vulnerability to manage application files. Apple has released recent updates but the issue remains a point of concern for digital asset custody.
Spotted an error? Write to suporte@criptoico.com.br.
