Cybersecurity
Binance has issued an urgent warning to iPhone users: a flaw in iOS dubbed “worse_query” could let a malicious app read local file
Binance has issued an urgent warning to iPhone users: a flaw in iOS dubbed “worse_query” could let a malicious app read local files stored by other apps — including crypto wallet seed phrases, private keys and login credentials.
The flaw affects iOS 26.7.1, 27.0.1 and 27.2. A proof-of-concept was published on GitHub on November 8, and a tool built on it, WQ Files, can browse, export, edit and delete other apps’ data without a jailbreak. It reaches iPhones through sideloading via AltStore or SideStore — not through the App Store.
Apple released iOS 27.2.1 and 26.7.3 on November 9, but has NOT confirmed a fix for worse_query, and no CVE number is confirmed. No crypto thefts have been confirmed so far.
Binance advises iPhone users to delete untrusted or sideloaded apps, update iOS and all apps, and — if compromise is suspected — move funds to a new wallet created on a clean device and reset all active login sessions.
Source: BleepingComputer, The Hacker News
