DarkSword emerges as powerful iOS exploit tool in global attacks
ID: ab91c714-746a-59c2-87e8-da164a4e391d
STIX ID: report--ab91c714-746a-59c2-87e8-da164a4e391d
Feed Name: Security Affairs
Threat Score
*DarkSword* is a newly disclosed iOS full‑chain exploit kit (six CVEs, three zero‑days) observed since late 2025 in watering‑hole campaigns across Saudi Arabia, Turkey, Malaysia, and Ukraine; it enables near‑complete device takeover of iPhones on iOS 18.4–18.7 to rapidly exfiltrate credentials and crypto wallet data in a hit‑and‑run fashion and has been used by multiple actors including the suspected UNC6353, illustrating exploit proliferation on secondary markets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.