iPhone Crypto Wallets at Risk: Outdated iOS Users Targeted by Malicious Exploit Chain

iPhone users running outdated iOS versions may be at risk of security breaches due to a linked exploit chain that can access protected phone data and wallet secrets. Researchers from Socket discovered 13 malicious themes on Packagist, which posed as Vietnamese streaming site themes but actually contained hostile JavaScript code. This code checked the iPhone's iOS version and loaded a matching exploit if it was running iOS 18.4 or later.

The malware can collect sensitive information such as Keychain records, messages, contacts, photos, browser cookies, Wi-Fi passwords, location history, and account databases. It also searched for wallet material linked to various crypto wallets, including Bitget, BitKeep, Bitpie, Phantom, Tonkeeper, Trust Wallet, and OKX.

The researchers found that the malware could collect data from various sources such as Photos, Notes, email, chats, or unprotected cloud files. To protect against this risk, users should update their iOS to the latest version, which is currently iOS 26.6.1. They should also enable Background Security Improvements and be cautious when browsing online.