Cybersecurity researchers have uncovered a complete exploitation chain targeting iPhone users and capable of stealing their private keys as well as their crypto wallet seed phrases. The attack relies on a social engineering technique that tricks the victim into opening a malicious page in Safari, which then exploits a memory corruption flaw in WebKit and JavaScriptCore to gain kernel-level access and extract data from the iOS Keychain and wallet applications. Experts estimate that iOS versions 13 through iOS 26.5 could be affected, although this range has not been independently confirmed. To protect against this threat, users are advised to install available updates as soon as they are released and to avoid opening untrusted links in Safari.
Source: Read the original article
