Slow Fog: Apple Store malicious phishing program can mimic normal applications to steal account passwords and bypass 2FA

ChainCatcher message, Slow Mist's Chief Information Security Officer 23pds posted on social media to remind users about the latest attack cases involving Apple ID, where malicious phishing programs appeared in the Apple Store, mimicking legitimate applications to steal user accounts and passwords. The attackers then added their own numbers to the two-factor authentication trust list, gaining control over account permissions to bypass Apple's 2FA.

He stated, "Cryptocurrency users must be cautious, as many users and wallet backup solutions currently rely on iCloud backups. Once attacked, it could lead to asset loss." (Source link)