DarkSword Exploit Kit Targets Millions of iPhone Users with Credential Theft

The DarkSword exploit kit has emerged, leveraging a leaked iOS exploit chain to create a network of malicious web properties targeting iPhones running iOS 18.4 to 18.7. This campaign employs fake Apple ID login pages to steal sensitive user credentials and data. The exploit chain was initially disclosed by the Google Threat Intelligence Group and has since been linked to a fast-moving server cluster. Millions of iPhone users are at risk as the attack vector allows for seamless device compromise. The infrastructure reportedly spans 180 web properties and 27 hosts, indicating a broad scope of impact. Security experts are urging immediate action to mitigate the risks associated with this exploit kit.

Key Points: • DarkSword exploit kit targets iPhones running iOS 18.4 to 18.7. • The campaign uses fake Apple ID login pages to steal user credentials. • The malicious infrastructure includes 180 web properties and 27 hosts.