Second iOS exploit kit now in use by suspected Russian hackers

**Executive Summary:** DarkSword is a large-scale iOS exploit kit discovered by iVerify, Lookout and Google that uses WebKit and WebGPU to achieve sandbox escapes and exfiltrate saved passwords, crypto wallets, text messages and other sensitive data; researchers link it to Coruna infrastructure and to actors tracked as UNC6353/UNC6748 and a commercial surveillance vendor, and note widespread potential exposure before Apple patched the flaws in iOS 26.3.