Internet reports that Slow Fog issued a security alert. On February 14, 2025, multiple users reported unauthorized access to their wallets. On-chain analysis showed that these incidents were related to the leakage of mnemonic words/private keys. Most of the affected users had installed an application called BOM, which proved to be a carefully disguised scam. Malicious actors use BOM to steal private keys and mnemonics, allowing them to transfer and hide stolen assets. The Slow Fog AML team and OKX Chinese team have conducted detailed investigations, tracked the strategies used, and provided key security advice to protect users.