Researchers Expose DarkSword, an iPhone Exploit Chain Targeting Millions of Devices
DarkSword uses six vulnerabilities to steal sensitive data from up to 270 million iPhones running older iOS 18.x versions, researchers said.
- On March 18, researchers at Google, iVerify and Lookout disclosed that Darksword was planted on dozens of Ukrainian websites, capable of instantly hacking iPhones, marking the second spyware discovery this month.
- Researchers found the exploit targeted iPhones running iOS versions 18.4 to 18.6.2, released by Apple between March and August 2025, with an estimated 220 million to 270 million iPhones still exposed.
- Lookout and iVerify reported Darksword steals passwords, messages, photos, browser history, Calendar, Notes, Health data, and cryptocurrency from wallet apps using fileless techniques with dwell time measured in minutes.
- Apple blocked the identified malicious domains in Apple Safe Browsing and an Apple spokesperson said exploits targeted 'out-of-date software', urging users to update.
- Researchers cautioned that UNC6353 used Darksword and Coruna toolkit across campaigns in Saudi Arabia, Turkey and Malaysia, revealing a flourishing spyware ecosystem this month.
117 Articles
117 Articles
Security researchers have discovered an attack method used by cybercriminals against Apple's iOS system. A single click on a link is enough – and "DarkSword" steals massive data. IT security company Lookout's graphics on the automated hacking tool "DarkSword" Image: lookout.comSecurity researchers have discovered a cybercriminal attack method against Apple's iOS system. A single click on a link is enough – and "DarkSword" steals massive data.Mar…
Google reveals another exploit chain affecting outdated iPhones
Following its recent disclosure of the Coruna exploit chain targeting older iOS versions, the company has now revealed a similar attack believed to be called DarkSword. Here are the details. more…
Millions of iPhones can be hacked with a new tool found in the wild
iPhone hacking techniques have sometimes been described almost like rare and elusive animals: Hackers have used them so stealthily and carefully against such a small number of hand-picked targets that they're only rarely seen in the wild. Now a recent spate of espionage and cybercriminal campaigns has instead deployed those same phone-takeover tools, embedded in infected websites, to indiscriminately hack phones by the thousands. And one new tec…
Hackers could hack the Cabinet server - iPhones in Ukraine are at risk due to spywareRussian hackers hacked the gov.ua server to distribute the DarkSword spyware. 270 million devices are at risk Apple with iOS 18.4-18.6.2.
New iPhone spyware Darksword spread through hacked websites, putting millions at risk
The discovery, announced Wednesday in coordinated reports from Lookout, iVerify, and Google's Threat Analysis Group, highlights a growing trade in high-end spyware once found mostly in state-backed espionage. Darksword marks the second iOS-targeting exploit uncovered this month, following the earlier disclosure of a separate tool known as Coruna. Both were...Read Entire Article
Coverage Details
Bias Distribution
- 53% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
