logo

'DarkSword' Attack Targets iPhones via Phishing Emails

ID: 9fc7e1a8-f7f8-5f2e-8916-9a08867f8630

STIX ID: report--9fc7e1a8-f7f8-5f2e-8916-9a08867f8630

Feed Name: ThreatCluster

Threat Score
78/100

Date Published: 2026-03-30

Date Updated: 2026-03-31

...
...

The 'DarkSword' phishing campaign is actively targeting iPhones by sending emails that link to malicious sites hosting DarkSword and exploiting unpatched iOS vulnerabilities (reported against iOS 18.4–18.7). Proofpoint links the campaign to the Russian Federal Security Service, notes a modest rise in targeting of international organizations, and stresses that users should update devices immediately as Apple has released patches for affected versions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.