Key Takeaways:
- Trust Wallet has issued a warning for Apple users to disable iMessage due to a zero-day exploit that could allow hackers to take control of iPhones without user interaction.
- The exploit’s potential danger is underscored by a dark web screenshot showing it being offered for $2 million, highlighting its high value and threat level.
- The validity of the exploit’s threat is debated within the crypto community, with some experts questioning the supporting evidence and worrying about potential unnecessary panic.
Trust Wallet, a well-known crypto wallet provider, is currently advising Apple users to turn off iMessage.
They have shared concerning intelligence about a zero-day exploit that poses a serious threat by potentially allowing hackers to seize control of users’ iPhones.
1/2: ⚠️ Alert for iOS users: We have credible intel regarding a high-risk zero-day exploit targeting iMessage on the Dark Web.
— Trust Wallet (@TrustWallet) April 15, 2024
This can infiltrate your iPhone without clicking any link. High-value targets are likely. Each use raises detection risk. #CyberSecurity
The alert, issued on the social platform X at 7:53 PM UTC on April 16, emphasized the severity of this exploit.
Trust Wallet detailed that this particular zero-day threat can invade iPhones and gain control without any interaction from the user, such as clicking a link.
Those with significant assets in their accounts are considered particularly vulnerable.
Threat intel detected an iOS iMessage zero-day exploit for sale in the Dark Web. It is a zero click exploit to take over control of the phone via iMessages. Its asking price is $2M. This would make sense for very high value individual targets, as more the zero-day is used,… https://t.co/KTKgW6uCuv pic.twitter.com/6ULRgVSxjc
— Eowync.eth (@EowynChen) April 15, 2024
A zero-day exploit refers to a cyberattack that exploits previously unknown vulnerabilities in software, hardware, or firmware.
The current exploit in question reportedly puts all crypto wallets on any iPhone at risk if iMessage remains active.
Eowyn Chen, CEO of Trust Wallet, further highlighted the risk by sharing a screenshot from the dark web.
This screenshot allegedly shows the exploit being offered for a staggering $2 million, which underscores the exploit’s perceived value and danger.
🚨WARNING:
— WhaleFUD (@WhaleFUD) April 15, 2024
A critical vulnerability in iOS has been uncovered, enabling passive infiltration via iMessage.
To safeguard their assets, cryptocurrency users, particularly those utilizing Trust Wallet, are urged to deactivate iMessage.
Despite these alarming revelations, the response from the crypto community has been mixed, with some experts questioning the legitimacy of the intel.
A pseudonymous blockchain researcher, known only as Beau, criticized the firm’s evidence as insufficient, suggesting it merely showed a claim rather than proof of an actual exploit.
Beau also expressed concern that such alerts could lead to unnecessary panic.
Trust Wallet: Alert for iOS users, we have credible intel regarding a high-risk zero-day exploit targeting iMessage on the Dark Web, this can infiltrate your iPhone without clicking any link. Recommended action to guard against this iMessage exploit; disable iMessages ASAP until…
— Wu Blockchain (@WuBlockchain) April 16, 2024
The discussion has attracted significant attention, with over 1.2 million views on X within just four hours of the post.
In response to skepticism, Trust Wallet stated that their intelligence came from ongoing assessments by their security team and partners.
In a related note, Apple recently had to address similar security concerns by issuing emergency updates last month for two zero-day vulnerabilities after they were exploited in attacks.
Please note; this risk is not only to Trust Wallet users, this is crypto wide
— Trust Wallet (@TrustWallet) April 15, 2024
This isn’t the first time Apple’s iMessage has been a vector for hackers; previous instances have been documented by security researchers like those at Kaspersky.
Additionally, the broader blockchain ecosystem faces threats, with cybersecurity firm Halborn reporting that more than 280 blockchain networks could be vulnerable to zero-day exploits, potentially jeopardizing over $25 billion in crypto assets.
About The Author
Efe Bravo, a seasoned journalist, delivers compelling insights into the cryptocurrency and blockchain industry.
His articles offer a deep dive into the latest trends, projects, and technological advancements shaping the future of digital finance.
Check Efe out on:
