Security firm SlowMist reports that malicious FomoPeek apps bypassed Apple's sandbox security to access sensitive user data, highlighting ongoing risks within the App Store ecosystem.
Apple is mentioned as the platform distributing the malicious app, but the article reports no direct financial or operational impact on Apple.
Security researchers at SlowMist have uncovered a malicious version of the FomoPeek application distributed via Apple's App Store. The app utilized sophisticated iOS kernel exploits to bypass sandbox protections, potentially compromising sensitive user data across other installed applications.
The app utilized iOS kernel exploits to escape the standard sandbox environment, allowing it to access data from other applications on the device.