Slow Fog: Black and Gray Industry Attack Chain Affects iOS Users from 13 to 26.5

The black and gray industry has established an attack chain against iOS users, including the extraction of private keys and mnemonic phrases. The attack process involves users accessing web pages via Safari, where memory corruption in WebKit/JSC allows for JS-level read and write capabilities, bypassing PAC to gain native call capabilities, escaping the WebContent sandbox, and ultimately obtaining root privileges through kernel escalation to steal Keychain and wallet data. Affected versions are iOS 13 to 26.5, and users are advised to upgrade their systems as soon as possible.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.