New DarkSword Variant Targets iPhones for Crypto Theft

Researchers identified a new P7 variant of the DarkSword spyware targeting unpatched iPhones running iOS 18.4–18.7; the variant improves stealth, reduces footprint, and adds capabilities to steal keychain and crypto wallet data. The malware is being distributed via malicious ads and watering-hole attacks, with evidence of an operational exploitation platform and recovered victim recovery phrases; Apple has released updates but many devices remain vulnerable, so prompt patching is advised.