[AAQQ12345]

Core penetration method: Web browser vulnerability attack (silent acquisition)

Compatible devices: All iPhone and later models

Compatible systems: iOS 13.0 – iOS 17.21

Attack process: Lure the target to visit a webpage/link, stay for 10–30 seconds, and the system will silently extract device information, wallet password, and mnemonic phrase in the background.

[darkanonx]

mate iOS 17.21 doesn't exist

[losharick]

Attack process: Lure the target to visit a webpage/link, stay for 10–30 seconds, and the system will silently extract device information, wallet password, and mnemonic phrase in the background.

This doesn’t sound right to me. As I understand it, iOS isolates apps and their storage, so a web browser shouldn’t have access to data from other apps.

I’m interested in this exploit, but do you have proof that it works? Could you provide a video demonstrating it, or perhaps conduct an authorized test on my iPhone?