Hackers have gon far and beyond our expectations, creating an app that helps in cryptocurrency tracking whereas it just a disguise in bypassing device security and stealing sensitive informations from the device. But I’m not much surprised because this isn’t the first time situations like this has occurred.
Hackers are trying to prove to us that they are making progress and finding ways to extort us and shows us that no matter how secured we try to get they will always find a faulty leak for themselves to sneak in. Imagine how many peoples informations and token they have already moved for long now before they were noticed, and now this message hasn’t reach some users yet and just imagine what risk they are on right now.

I think it's important that if someone already installed the affected version, simply uninstalling it will not solve the problem. If the malware was already able to access the private key or seed phrase, removing the app will not make those keys safe again.

As per the SlowMist security warning, the safest option is to create a completely new wallet with a new private key and seed phrase on a clean device where FomoPeek was never installed, then transfer the funds there.

For the old device that was infected, if you still want to use it again, I think the safest option is to factory reset it and set it up clean. I don't really see a reason to take the risk of continuing to use it without fully cleaning the device first.

That's crazy, usual security recommendation (such as limit app permission) wouldn't save the victim against this kind of security vulnerability.


Based on https://en.wikipedia.org/wiki/IOS_18 and https://en.wikipedia.org/wiki/IOS_26, iOS 18.7 released in September 15, 2025 while iOS 26.1 released in November 3, 2025. So i guess the impact limited to people who haven't updated their iOS in more than half a year or use outdated iOS devices.

Honestly you are right and this are just more reasons that proves ZackXBT wrong. Phones can be easily compromised by just a single missteps like this app alone serves as a good example for that and even through software updates can still get phones expose not like hardware wallet.
 He could have thought through deeply before making iPhone seems superior than hardware in terms of security and safety.


Technically only few people can escape this in reference to this situation of IOS update because it crazy how people rush into updating their IOS as soon as new ones are released. Even I also don’t take much time to updates my IOS as soon as a new one is released so I guess this implies to others too because people are just so obsessed with IOS and honestly we can’t blame them with the features it has.


How was about asking that same question that after the device is being affected and we create  a new wallet and set it up on another device just as SlowMist team instructed. I know it might be risky but after factory restore of the phone can it still be used totally free from another theft activity or it can still be compromised or still compromised?
 
 Well in my opinion I think it will be free from any form of that theft issues because it just as if the phone is now a brand new phone.
But can that wallet be still used back again or the wallet is already compromised?

That's fair argument, i also think few people also never doing it manually either. Looking at Apple help page, it seems automatic update isn't turned on by default.


Apple also only changed the default behavior from iOS version 26.2.

For those who often monitor the news, it is already known that updating does not always mean that it is a useful action for owners. There have been several high-profile cases where phones have turned into, roughly speaking, "bricks" after an update. This has happened several times with iPhones for Russian users. Therefore, the word "update" should not always be interpreted as an urgent and necessary action. But you're right, people sometimes trust developers, thinking that they're updating something that will definitely work better.

It appears that all the developments and technical improvements of phones are becoming useless against the background of how hackers often "copy" those trusted applications that people previously trusted. Today, installing an app doesn't mean it's convenient to use your phone. The phone should just perform its direct function; everything else, as it seems, only harms it and its owner.

Well, you can already assume that your wallet has been compromised, so the safer move is to create a new wallet on a clean device and transfer the funds there. If you're going to factory reset the infected phone, you should still create a completely new wallet with a new seed phrase and new keys.

It's basically like wiping the whole infected system, but before doing that, you move the funds to a fresh wallet on a clean device so the old compromised keys are no longer used.

Try to move them asap, as attacker can empty your old wallet at any moment. Import your old seed to a CLEAN DEVICE ONLY. NEVER input your seed again to infected phone.

Some assets (eg. ETH-based or TRX tokens) need gas for the transfer. Often there are some malicious sweeper bots that steal gas funds as soon as they get in your wallet. So for such cases provide minimum amount of gas and try to move all of the assets in a single tx.

I think we are on the same page here.
Because I was a bit confused when he did mentioned that importing the seed because importing is basically syncing,  so hope he isn’t thinking of moving the seed phrase into another new clean device because if that what he means then he isn’t free from the scammers and the new device is already compromised as soon as the wallet enters.
The wallet itself is totally compromised so the best solution is to move the funds inside to another new wallet on another new phone i.e if the funds are still intact on the compromised wallet. Taking the wallet to another phone is not the solution and moving the funds into another wallet on the same phone which was compromised isn’t the solution too.