Researchers have discovered a powerful malware called “Darksword” targeting Apple iPhones in Ukraine and other countries. The exploit can steal sensitive information and cryptocurrency wallet data from potentially millions of iPhone users.
This is the second major iPhone spyware discovered this month. Earlier, the “Coruna” malware was identified, showing that the market for sophisticated iPhone-targeted exploits is growing rapidly. Both spyware tools were hosted on servers connected to prior hacking operations.
Cybersecurity firms Lookout, iVerify, and Google analyzed Darksword, revealing it targeted iPhones running iOS versions 18.4 to 18.6.2. Many devices remain vulnerable because users do not always update their iPhones promptly. Experts estimate that between 220 million and 270 million iPhones could be exposed globally.
Google researchers noted that multiple commercial vendors and suspected state-linked actors were using Darksword in coordinated campaigns. Targets included users in Saudi Arabia, Turkey, Malaysia, and Ukraine. Some campaigns were linked to Turkish commercial surveillance companies, though officials did not comment.
Apple confirmed that the vulnerabilities exploited by Darksword affect older iPhone software. The company said updates released over the last few years have patched these issues. Apple also blocked malicious domains in Safari using Safe Browsing to prevent further attacks.
Experts stressed that keeping iPhone software up to date is the most critical step users can take to protect their devices. They noted that the recent discovery shows mass-targeted iPhone attacks are increasingly sophisticated but often operationally sloppy, making detection easier.
“The widespread targeting of iPhones indicates the growing value of these exploits for financially motivated attackers,” said Justin Albrecht, principal researcher at Lookout. Rocky Cole of iVerify added that the ecosystem for iPhone malware has expanded beyond state-level operations.
In other news read more about Apple Launches iPhone 17e with Satellite Messaging Starting at $599
Users are advised to update their iPhones to the latest iOS versions, avoid suspicious links, and monitor financial accounts for unusual activity. The Darksword and Coruna discoveries highlight the urgent need for vigilance among iPhone users worldwide.
