DarkSword: The Hit-and-Run Successor to the Coruna iOS Exploit Kit

**Executive Summary:** Recent intelligence details DarkSword, a new, highly sophisticated iOS exploit kit deployed via watering-hole webpages that chains multiple vulnerabilities to achieve in-memory, kernel-level compromise on iOS 18.4–18.7; operators conduct rapid "hit-and-run" exfiltration focused on cryptocurrency wallets and credentials and then erase traces, with observed targeting in Ukraine, Saudi Arabia, Turkey, and Malaysia and attribution to state-sponsored and commercial surveillance actors.