SlowMist found FOMO, a crypto-draining app, on Apple's App Store for 8 days. It exploited a WebKit flaw to steal seed phrases and private keys from iPhones.