A new Russian-linked exploit kit is silently compromising iPhones via infected websites. 📱
DarkSword · Targets iOS 18.4 to 18.7 · Full Device Takeover and Data Theft.
Joint research from @[Google]\\(urn:li:organization:1441\\)‚ iVerify‚ and Lookout has identified a sophisticated new spyware delivery framework dubbed DarkSword. Hosted on compromised government servers in Ukraine‚ the kit uses six distinct flaws to gain root control over iPhones when a user simply visits a malicious site.
The spyware exfiltrates Wi-Fi passwords‚ call history‚ root location history‚ and specifically targets cryptocurrency wallets and health databases. Researchers estimate that up to 270 million iPhones remain vulnerable due to running outdated software released in mid-2025.
The uncomfortable truth: Your mobile devices are no longer just communication tools; they are the primary targets for high-speed‚ automated espionage and financial theft.
→ Force a security update for all managed @[Apple]\\(urn:li:organization:162479\\) devices to the latest iOS 26.3+ or the Background Security Improvements ❨BSI❩ update.
→ Enable Lockdown Mode for high-risk users to reduce the attack surface for WebKit-based exploits.
→ Use MDM to isolate any devices that are no longer receiving critical security patches.
#Cybersecurity #MobileSecurity #iOS #Spyware #ThreatIntelligence #CodeDefence