logo

Axios Future of Cybersecurity: Russians suspected of using iPhone spyware

ID: 855b143c-a944-59fa-8786-d2fe25200a39

STIX ID: report--855b143c-a944-59fa-8786-d2fe25200a39

Feed Name: Proofpoint Blog

Threat Score
78/100

Date Published: 2026-03-31

Date Updated: 2026-04-28

...
...

Suspected Russia-linked group TA446 conducted a phishing campaign impersonating the Atlantic Council to target Europe-based journalists and researchers with links that could deliver DarkSword iPhone spyware. Researchers warn this is the first known real-world use of a leaked version of DarkSword, which can infect outdated iPhones simply by visiting a malicious site, and the operation appears aimed at credential harvesting and intelligence collection while highlighting the increased risk from widely available mobile spyware.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.