I don’t want to pin it on a particular client because there’s 2-3 attack vectors that I think could have been the initial point of entry based on the clean up I did

I know this… my VPN was deprecated due to a patch I didn’t update which could have made my browser/ web front end insecure

I think this may have rawdogged my nsec in a client where my keys became compromised so that was user error

But also I’ve realized that some nostr clients have a backend way of getting around your phones permissions meaning they can remote access you camera without you knowing…

I run systems logs but iPhones are designed in a way that makes it hard to isolate when this exactly happened, however, the green and orange lights on your phone (mic and camera access) are big red flags

Eventually once the script was running it was very obvious as my keyboard was absolutely fucked and my entire phone looked off… font size had changed, app logos looked non standard… it was just weird