On September 23, BlockBeats reported that SlowMist CISO 23pds clarified that the malware reports concerned FomoPeek, not the official FOMO iOS app.
A joint investigation by SlowMist and OKX confirmed malicious modules in FomoPeek 1.1 and 1.2 capable of exploiting iOS vulnerabilities to access sensitive device data. The primary attacker address tracked in the report received approximately 580,000 USDT.
Version 1.3 removed the modules. SlowMist says uninstalling or upgrading cannot recover exposed data and advises affected users to create a new wallet on an unaffected device and move their assets.