Back Onebullex DarkSword iOS Exploit Campaign Drains $5.57 Million From 20 Crypto Wallets
Security researchers have linked the DarkSword iOS exploit campaign to approximately $5.57 million in cryptocurrency losses, with more than 20 wallets confirmed as affected. The campaign represents a significant targeted operation against mobile crypto users, with losses concentrated across multiple wallet types rather than a single platform. The $5.57 million figure underscores the scale of the theft, which unfolded through a coordinated series of exploits rather than isolated incidents.
The DarkSword campaign operates through at least 18 malicious websites that serve as the primary delivery mechanism for the iOS exploit. These websites are designed to trick users into visiting them, likely through phishing links, social engineering tactics, or compromised advertising networks. Once a user lands on one of these malicious pages, the exploit targets vulnerabilities in iOS to gain unauthorized access to the device and its cryptocurrency wallets.
The timeline of the thefts spans an unspecified period, with the $5.57 million in losses accumulating across the more than 20 affected wallets before researchers publicly flagged the operation. The discovery process involved analyzing the 18 malicious websites and connecting them to the wallet-draining exploits. Security researchers have issued warnings to the cryptocurrency community the active threat, though the exact date of the first infection remains unclear.
The identity of the threat actor or group behind the DarkSword campaign has not been publicly established. Researchers have not released indicators of compromise beyond the 18 malicious websites, and no known threat actor group has claimed responsibility for the operation. The technical sophistication required to develop and deploy iOS exploits of this nature suggests a capable actor with significant resources or access to exploit markets.
Disclaimer: The content provided on Onebullex News is for informational purposes only. We do not guarantee the quality, accuracy, or completeness of the information sourced from third-party articles. The content on this page does not constitute financial or investment advice. We strongly encourage you to conduct your own research and consult with a qualified financial advisor before making any investment decisions.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
