By Rebecca Payne & Brian Baker
Social media users who are already overwhelmed by doomscrolling now have two new anxieties to add to their list: Coruna and Darksword.
The two iOS exploit kits are infecting iPhones with malvertising simply through scrolling on Instagram and unassuming websites. Many of the websites were associated with the World Cup or trending topics, and the malware was used to steal keychain passwords and subsequently siphon money out of cryptocurrency wallets.
“Users aren’t visiting malicious websites,” Rocky Cole, CEO and cofounder of security startup iVerify, told Forbes. “They’re not doing anything wrong. They’re just scrolling and being infected.”
Thanks for subscribing!
The money news that actually matters.
By signing up, you accept Moneywise Terms of Use, Subscription Agreement, and Privacy Policy.
Law enforcement trying to keep staying abreast of new scams
The sophistication of scammers has been increasing, leading to many Americans losing their life savings, like one man in Peoria, Ariz. Law enforcement was able to obtain a warrant to freeze the accounts so Dave could get his savings back.
“I’d never seen this before: a scannable card in his wallet to activate the ATM, to turn it into a direct account-to-account portal,” Peoria police detective Michael Finney told 12News. “They basically turned his phone into a weapon.”
Finney was able to recover about 90% of Dave’s money after five months. He also noted that in most cases, if the crime isn’t reported within 72 hours, the likelihood of recovering the stolen money is slim.
Must Read
- Jeff Bezos backs a platform that lets anyone invest in rental homes for as little as $100 — 6 ways to build wealth like a landlord without actually being one
- The tax breaks in Trump's 'big beautiful bill' expire after 2028. Here are 4 moves to make before the window closes
How to protect yourself from scams
The problem with the tech used by crypto thieves is that there are no malicious texts or emails. It’s done through passive actions on social media and through browsers like Safari and Chrome.
iVerity encourages those running a website to audit their third-party tags. Go through every external script and remove any for services you no longer use. Also, know what your pages are loading, and use a content security policy.
For iPhone users, be sure to update your iOS regularly and apply patches as soon as they are released. If you use your iPhone for your crypto account, be sure to turn on Lockdown Mode. If you suspect you’re a victim of an attack, you can use apps like iVerify Basic to scan for any signs of compromise.
How can I protect myself from digital payment scams?
Apple may have a strong reputation for being secure and somewhat infallible, but that doesn’t mean they’re immune to malware or viruses.
With the increase in digital payment methods, such as Apple Pay or any crypto apps, there also comes a rise in fraudsters looking to exploit the technology.
Once a scammer has the information they need, they will then switch the account details to their own, so that when you send the money back, it goes directly to them. The original payment they made is canceled, and any money, crypto or traditional payment will vanish.
Protect yourself by avoiding unsolicited messages and their links, changing the settings in your digital payment methods to manually accept payments, as well as being careful when using public Wi-Fi networks and what sites you visit.
Do not enter sensitive information or add accounts to digital wallets while on public Wi-Fi.
You May Also Like
- Dave Ramsey warns nearly 50% of Americans are making 1 big Social Security mistake — here’s what it is and 3 simple steps to fix it ASAP
- A single line on your car insurance policy could be inflating your premium by up to 30% — here's what to change
Rebecca Payne has more than a decade of experience editing and producing both local and national daily newspapers. She's worked on the Toronto Star, the Globe and Mail, Metro, Canada's National Observer, the Virginian-Pilot and Daily Press.
