Ahh gotcha, gotcha. I had a similar issue last September and that’s how I realized I had interacted with a malicious nostr client and had script running on my phone which then device hopped and infected my entire network- 10k in destroyed hardware later

Reply to this note

Please Login to reply.

Discussion

^^ that’s why I was curious

Whoa

Yeah was a bitch but also rlly made me feel confident about my preferred methods of securing bitcoin

Which one?

Malicious nostr client? Which one? Is it still around?

I don’t want to pin it on a particular client because there’s 2-3 attack vectors that I think could have been the initial point of entry based on the clean up I did

I know this… my VPN was deprecated due to a patch I didn’t update which could have made my browser/ web front end insecure

I think this may have rawdogged my nsec in a client where my keys became compromised so that was user error

But also I’ve realized that some nostr clients have a backend way of getting around your phones permissions meaning they can remote access you camera without you knowing…

I run systems logs but iPhones are designed in a way that makes it hard to isolate when this exactly happened, however, the green and orange lights on your phone (mic and camera access) are big red flags

Eventually once the script was running it was very obvious as my keyboard was absolutely fucked and my entire phone looked off… font size had changed, app logos looked non standard… it was just weird

Do you remember if it was a web client or a full blown iOS app?

The phone camera issue happened on my iOS but the deprecated VPN happened on my PC

I was using 3 separate popular client apps, plus testing 1-2 in beta but I do believe that the compromise happened prior to the beta testing

Hmm… I guess it’s hard to pinpoint