iOS Vulnerability Allows Stealing Crypto from Trust Wallet

A critical vulnerability has been discovered in older versions of iOS, allowing attackers to steal cryptocurrency from the Trust Wallet via infected websites.

Attack Mechanism

The hack works as follows: the user opens a malicious page in the Safari browser, where a hidden exploit is already loaded and running. To activate the attack, it is enough to click on any ad tab or banner on the site. After that, the malicious code gains access to wallet data and can drain it.

Practical Examples and Protection

One documented case demonstrates the effectiveness of the attack: the victim visited an adult website, accidentally clicked on an ad, and within minutes $16,428 was drained from three of her wallets.

To protect against such incidents, you must take the following actions:

• Update the iOS operating system to the latest stable version
• Avoid clicking on suspicious links and ads on unverified sites