Binance-backed TrustWallet cited “credible information” pointing out high-risk attack vectors that hackers can deploy via Apple iMessage.
The self-custodial crypto wallet provider said dark web hackers are targeting iPhone and iOS users through a zero-day exploit in Apple’s default Messenger. Trust Wallet’s warning suggested that the exploit corridor has been present on the tech giant’s devices since day one.
However, the startup did not disclose who provided the information or whether users suffered any loss of crypto assets.
Trust Wallet recommended turning off iMessage completely from Apple Settings to alleviate the issue pending a code fix. At the time of writing, Silicon Valley executives had not addressed or denied the allegations.
The National Institute of Standards and Technology (NIST), a division of the U.S. Department of Commerce, previously reported an investigation into the Binance-owned application due to security flaws found in the iOS version.
Apple caught in the crosshairs of cryptocurrencies
Trust Wallet is the second cryptocurrency wallet solution to alert users about Apple-related issues this month. As previously reported by crypto.news, Bitcoin (BTC) wallet UniSat has notified users of a fake version of its decentralized storage solution on the iOS app store.
Last month, the cryptocurrency community became aware of GoFetch, a side-channel attack vector. This vulnerability allowed malicious attackers to steal encryption keys due to a bug in the CPU cache of Apple’s M1, M2, and M3 MacBook computer chips.
The company has acknowledged the issue, but details of the security patch have not yet been disclosed. Industry voices like Errata Security CEO Robert Graham advised users holding large amounts of cryptocurrencies to move their assets off their iOS devices as a precaution.
