Alert for iOS Users

Crypto wallet provider Trust Wallet has advised Apple users to disable iMessage due to concerns about a zero-day exploit. This vulnerability poses a serious threat, potentially granting hackers control over users’ phones.

“Alert for iOS users: We have credible intel regarding a high-risk zero-day exploit targeting iMessage on the Dark Web,” the company posted on X (formerly twitter) at 7:53pm UTC on April 16.

 

The firm emphasised that the zero-day exploit has the capability to infiltrate and seize control of iPhone users’ devices without requiring them to click on any links. Additionally, it highlighted that individuals with high-value accounts are specifically vulnerable to this threat.

What is a zero-day exploit, though?

Zero-day exploit is a type of cyber security attack that occur on the same day the software, hardware or firmware flaw is detected by the manufacturer.

As it’s been zero days since the security flaw was last exploit, the attack is termed as zero-day exploit or zero-day attack. This kind of cyberattacks are considered dangerous because the developer has not had the chance to fix that flaw yet.

Trust Wallet stressed that all crypto wallets held on an iPhone with iMessage switched on are at risk.

However, the so-called threat was met with scepticism from several industry experts.

Apple has recently issued emergency security updates to address two iOS zero-day vulnerabilities that were exploited in attacks on iPhones just last month.

Furthermore, security researchers at Kaspersky have noted that Apple’s iMessage application has previously been utilised as an attack vector by hackers.

Not only this, but cybersecurity firm Halborn asserted last month that over 280 blockchain networks are susceptible to zero-day exploits, potentially endangering at least $25 billion worth of cryptocurrency. 
 

It is true that security systems have been growing more over the years, but it does not eliminate the risk of vulnerable networks falling prey to exploits and security threats.

This is where MPC wallets come in handy.

It’s in the DeFi security context that multi-party computation (MPC) wallets have emerged as viable options for users in the web3 landscape.

•    MPC wallets are difficult to hack, since it is impossible to access the private key in a single location.

•    This type of wallets is highly resilient and resistant against many forms of cyberattacks – such as phishing or malware.

You can learn more about MPC wallets here.