Google, along with cybersecurity firms Lookout and iVerify, has identified a new hacking technique named “DarkSword” that poses a serious threat to iPhone users by exploiting vulnerabilities in iOS 18. This fileless hack could potentially affect around 24% of iPhones, specifically targeting versions between iOS 18.4 and 18.6.2. DarkSword operates by embedding a malicious iframe in a web page, allowing it to steal sensitive data—such as passwords and cryptocurrency wallet information—without leaving a trace on the device. The hack has reportedly been used in countries like Ukraine, Saudi Arabia, Malaysia, Turkey, and Russia, and its source code was made publicly accessible, increasing the risk of widespread exploitation. Apple has released patches in iOS 26 to address the vulnerabilities exploited by DarkSword, but many users remain on older versions of the operating system.
Why It Matters
The emergence of DarkSword highlights the ongoing cybersecurity challenges faced by iPhone users, particularly those not running the latest software updates. Approximately 24% of iOS devices are still using iOS 18, leaving a significant number of users vulnerable to such attacks. Fileless hacks like DarkSword are especially concerning as they utilize existing system processes to exfiltrate data, making them harder to detect. With cyber threats evolving rapidly, the importance of regular software updates and vigilance in web browsing practices becomes increasingly critical for safeguarding sensitive information.
Want More Context? 🔎
