cryptosecurity – The Shib Daily

Urgent iOS Update Released After Zero-Click Hack Targets Crypto

Michaela — Mon, 25 Aug 2025 06:36:30 +0000

Summary: Why is the Apple zero-click vulnerability dangerous for crypto users?

The flaw allows hackers to access devices and potentially steal wallet apps or exchange credentials without user action. This makes crypto holdings especially vulnerable because transactions are irreversible. Users are urged to update devices, use strong passwords, and consider extra security like hardware wallets or multi-factor authentication.

Listen to This Article

Prefer to listen? Hit play below to hear the narrated version.

Apple has issued an emergency update to fix a zero-click vulnerability in iPhones, iPads, and Macs that could allow hackers to access sensitive data, including crypto wallets.

Apple confirmed in an advisory that the vulnerability, identified as CVE-2025-43300, exists within its Image I/O framework, which handles image processing across devices. The company noted that a specially crafted image could cause memory corruption, potentially allowing attackers to execute code on a targeted device without any user action.

Apple released iOS 18.6.2 and iPadOS 18.6.2 for iPhone XS and newer models, as well as a range of iPads including iPad Pro (all recent generations), iPad Air 3 and later, iPad 7 and later, and iPad mini 5 and later. The company also noted that the vulnerability may have been exploited in highly sophisticated attacks targeting specific individuals.

The vulnerability poses a significant risk for crypto holders, as attackers who gain access to wallet apps or exchange credentials on a compromised device could potentially drain funds immediately.

This type of flaw spotlights the broader risks of storing sensitive financial information on mobile devices. Even a single compromised device could give hackers full access to cryptocurrency accounts, with transactions being irreversible.

Crypto holders are urged to apply updates promptly and consider additional security measures, such as hardware wallets or multi-factor authentication, to protect their digital assets.

Zero-Click Flaw Heightens Crypto Security Risks

The Apple zero-click vulnerability emphasizes the speed and severity with which crypto wallets can be compromised. For SHIB holders, this means that even routine use of mobile devices to access wallets or manage tokens carries heightened risk. Because cryptocurrency transactions cannot be reversed, any breach could lead to permanent loss of funds.

Staying current with system updates, using strong and unique passwords, and enabling multi-factor authentication are essential steps to protect digital assets. Measures such as moving tokens to hardware wallets, enabling multi-factor authentication, and monitoring account activity can help mitigate potential threats.

The incident emphasizes that maintaining crypto security is not just about the platforms themselves, but also about how users manage and safeguard access to their wallets. Vigilance, proactive security measures, and awareness of potential threats are key to reducing exposure in an increasingly targeted digital landscape.

Michaela has no crypto positions and does not hold any crypto assets. This article is provided for informational purposes only and should not be construed as financial advice. The Shib Magazine and The Shib Daily are the official media and publications of the Shiba Inu cryptocurrency project. Readers are encouraged to conduct their own research and consult with a qualified financial adviser before making any investment decisions.

The post Urgent iOS Update Released After Zero-Click Hack Targets Crypto first appeared on The Shib Daily.

BEWARE: Poisoned Emails Are Draining Crypto Wallets

Gushiken Yona — Mon, 07 Apr 2025 09:32:30 +0000

Digital thieves deploy poisoned emails in widespread attacks on crypto wallets, tricking users with fake security phrases sent from compromised accounts to steal funds directly from their wallets.

How Email Phishing Powers New Attacks on Crypto Wallets

The operation often starts with a breach. Attackers use phishing techniques – sending deceptive emails with malicious links or attachments – to steal login credentials for business tools. Specifically, they target accounts associated with customer relationship management (CRM) software and bulk email providers like Mailchimp, SendGrid, and Hubspot, according to analysis by security firm Silent Push.

Once inside these systems, the attackers may set up API keys. These keys grant them ongoing access, a persistent foothold even if the victim discovers the initial breach and changes their password. This access is crucial for the next stage: weaponizing the compromised account.

What Is the PoisonSeed Campaign?

Security researchers have named one prominent operation “PoisonSeed.” After gaining access, PoisonSeed operators export mailing lists stored within the compromised CRM or email platform.

They then use the platform’s own infrastructure to send out mass emails. Because these emails appear to come from a legitimate organization – the one whose account was compromised – recipients are far less likely to be suspicious.

This veneer of legitimacy is key to the scam’s effectiveness. The PoisonSeed campaign represents a dangerous evolution in email phishing crypto tactics.

Seed Phrases as a Trap: How It Works

The emails sent by PoisonSeed often impersonate known cryptocurrency companies, such as Coinbase. They might contain urgent warnings or instructions, telling the recipient they need to set up a new, secure crypto wallets immediately.

Crucially, the email provides a “seed phrase” – typically 12 or 24 words – needed to create or restore the wallet. This is the trap. The provided seed phrase was generated by the attackers, not by legitimate wallet software.

“Recipients of the bulk spam are targeted with a cryptocurrency seed phrase scam,” Silent Push stated in its report. If a user follows the instructions, creates a wallet using this phrase, and deposits funds, the attackers possess the master key. They can use the same seed phrase to access the wallet at any time and drain its contents.

credit: TroyHunt

Who’s Being Targeted—and Why It’s Not Just Crypto Pros

The reach of the PoisonSeed campaign extends beyond dedicated crypto enthusiasts. Targets include large businesses and individual users, many of whom may have only minimal interaction with cryptocurrencies.

The attackers cast a wide net, relying on the compromised email accounts to reach potential victims who might trust a message from a known company or service provider. This broad targeting underscores the pervasive nature of these attacks on crypto wallets.

While some tools used in PoisonSeed overlap with those employed by other known cybercrime groups, researchers assess it as potentially distinct, highlighting the continuous innovation by attackers in the crypto space.

Staying Safe: Best Practices Against Email-Based Scams on Crypto Wallets

Defense against these attacks requires caution and adherence to fundamental security practices:

Be extremely skeptical of unsolicited emails demanding urgent action related to security or finances, especially those involving cryptocurrency.
Never use a seed phrase provided to you in an email, message, or website. Legitimate seed phrases are generated only by your wallet software during setup and must be kept private and secure offline.
Independently verify any requests or instructions by contacting the supposed sender through official channels, not by replying to the suspicious email.
Use strong, unique passwords and enable multi-factor authentication (MFA) on all email, financial, and crypto-related accounts.

Understanding the mechanics of these scams is the first step toward avoiding them. Vigilance remains the most effective shield.

The post BEWARE: Poisoned Emails Are Draining Crypto Wallets first appeared on The Shib Daily.