Their app store is by definition vetted, this is from their page. Whether there have been exploits happening in the wild or not.


They even have very strict guideline and only allow for sideloading inside EU because of regulation, unfortunately the scanner and the experts didn't catch the harmful app because it's highly sophisticated which means even a strict guideline and review process by experts isn't nearly enough when there are so many moving parts even with regular moderation.

Which is the exacty the reason why iPhone could never be as secure as hardware wallet and saying otherwise is lying because hardware wallet don't host 3rd party app created by stranger from other part of the world.

1st party app beat vetted app store consisting of 3rd party apps any day.

And probably the name itself is already a catch, "Slow" we all know what it means and "Mist", water droplets specially in the morning. So that's why they drain the wallet of their victims, in a slow manner and little by it.

But then after you sum up everything, it's going to be worth $500k of easy money for this criminals.

I do hope that it will set a precedence again not to download this kind of app that monitors huge Bitcoin addresses.

Unfortunately, we are now in a time when a race is unfolding between manufacturers of artificial intelligence, and all companies are being tested for technological robustness precisely because artificial intelligence examines every line of code for flaws in the developer’s design. And therefore, all tech giants must obtain the most advanced artificial intelligence models and use them to investigate their applications and services faster than hackers.
We can see that this should ideally be the case, but the trend shows us that the number of hacking incidents is growing, which means that hackers are now faster than anyone else. They are at the peak of cunning and technological prowess.

While iOS once seemed like a secure system, attackers have now found a way to bypass its defenses - not by "hacking" it directly, but by circumventing protections through "trojan horse" tactics. This method reminds me of the this incident, where a malicious program was passed off as the desired trading bot. It appears we have entered an active phase of the industry where malware increasingly masquerades as legitimate apps.

It is time to become seriously alarmed and exercise the utmost vigilance.

I saw a news report stating that attackers have already siphoned off over $500k. in USDT from victim's wallets. I wonder why only USDT? Why not other crypto assets? Did the victims hold only USDT, or is this somehow related to the trojan's (Ghostblade) limitations?

What conclusion did I reach after learning about this incident? I am increasingly convinced of the need to use dedicated devices (or OS's) for handling cryptocurrencies. While I previously thought this applied only to PCs and laptops, I now believe the same rule should apply to mobile devices - unless, of course, you are willing to risk losing the contents of your wallet (for instance, if you are holding only small amounts). Essentially, you need a second smartphone specifically for cryptocurrency transactions - one free of unnecessary apps and used for no risky activities (like browsing dubious websites), and linked to a dedicated email (used nowhere else) and other measures that could otherwise serve as a "backdoor" into your funds. An even better solution is to use a combination of a smartphone and a hardware wallet.

What times we live in! Hardware wallets, smartphones, and even people (via social engineering) are being hacked. Where, then, should the humble investor keep their assets?