Au.Pcmag 'DarkSword' Attack Targets iPhones via Phishing Emails
Article Content
- •DarkSword attack targets iPhones via phishing emails exploiting iOS vulnerabilities.
- •Russian Federal Security Service is suspected to be behind the phishing campaigns.
- •Users on iOS 18.4 to 18.7 are urged to update their devices immediately.
The 'DarkSword' attack is now exploiting unpatched iPhones through phishing emails, as reported by Proofpoint. These emails contain links to malicious sites that host DarkSword, targeting iPhones running iOS versions 18.4 to 18.7. The attack, previously used for cyberespionage, gained traction after its details were leaked online. Proofpoint suspects the Russian Federal Security Service is behind these phishing attempts, which masquerade as communications from the Atlantic Council. Users are urged to update their iPhones immediately to mitigate risks, as Apple has released patches for older devices. The phishing campaign has seen a modest increase in activity, primarily targeting international organizations. Users on iOS versions 13 and 14 must update to iOS 15 to receive necessary protections. Apple has been proactive in alerting users about the vulnerabilities and the importance of updates.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track DarkSword in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Star Blizzard Expands Phishing Operations with RedFlick Technique Russian state-sponsored hacking group Star Blizzard has significantly escalated its phishing operations since January 2026, targeting over 100 organizations, primarily in the U.S. and U.K. The group has shifted from targeted spear-phishing to large-scale campaigns, employing a new malware delivery method called…
Atlassian Flaw Exploited Within Hours of Disclosure A vulnerability in Atlassian Data Center products, tracked as CVE-2026-21589 with a CVSS score of 9.3, was within two hours of its disclosure. The flaw allows arbitrary file access and affects multiple products, including Bitbucket, Confluence, and Jira. Exploitation activity targeting honeypot networks began…