Darksword malware exploits vulnerabilities in older ios versions

Google, iVerify and Lookout have uncovered a new iPhone exploit kit dubbed Darksword, capable of stealing financial and cryptocurrency data.

Exploiting outdated ios versions

The malware, which was spotted in campaigns targeting users in Saudi Arabia, Turkey, Malaysia and Ukraine, could potentially affect hundreds of millions of devices running iOS 18.4 to 18.6.2.

While many have upgraded to the latest iOS 26, statistics suggest around 270 million iPhones still run exposed iOS versions. Apple has fixed the vulnerabilities through several software updates, emphasizing the importance of keeping devices on the latest versions for strong security protections.

Darksword's emergence alongside Coruna, another exploit kit targeting financial data, hints at an expanding market for these sophisticated tools, once largely limited to state-level agencies.

As a reminder, users should avoid clicking random links and messages, which could lead to infection even if sent by an infected friend. Apple has also blocked the malicious domains identified by Google through Safari's Safe Browsing feature.