The Digester

Security teams disclosed a new iPhone exploit called DarkSword that has been deployed on infected websites to compromise iPhones running iOS 18, steal a wide range of personal data, and was left publicly accessible for reuse by other attackers.

Researchers at Google, iVerify and Lookout found DarkSword embedded in compromised websites that silently hack visiting iPhones.
DarkSword exploits most versions of iOS 18 but does not affect devices updated to the latest iOS 26 release.
The tool uses fileless smash-and-grab tactics to steal passwords, messages, photos, browser history, health data and cryptocurrency credentials without leaving a persistent implant.
Researchers say the full, documented DarkSword code was left accessible on infected sites, making it easy for other attackers to reuse.
The campaign was linked to a Russian state-associated actor and likely originates from a brokered market for exploits, increasing the risk of broader criminal reuse.

Reusable 'DarkSword' iPhone exploit found in the wild, putting many iOS 18 devices at risk

Articles