Published • loading... • Updated
There's an Easy Way to Stay Safe From the New 'DarkSword' iPhone Hackers
DarkSword spyware exploits multiple zero-day iOS vulnerabilities to steal data from iPhones in select countries, with 66% of devices running patched iOS versions, Apple says.
- On Wednesday, Google Threat Intelligence Group published reports revealing DarkSword targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine, with Apple responding publicly.
- DarkSword exploits six zero-day vulnerabilities through compromised websites and malicious iframes, breaking out of the Safari WebContent sandbox to escalate privileges on iPhones.
- DarkSword can quickly scrape credentials, keys, documents, emails, crypto wallets, photos, and access privileged iOS processes after a user visits a compromised site.
- IOS 26.3 and iOS 18.7.3 include final fixes, and Apple pushed an iOS 15 and iOS 16 emergency update on March 11; users running iOS 15 through iOS 26 are protected with Critical Security Update alerts arriving soon.
- GTIG says the exploit has been active since at least November, was reported to Apple in late 2025, and operators include commercial surveillance vendors and a group suspected of ties to the Russian government, while roughly one-fifth of iPhone owners remain on iOS 18.
Insights by Ground AI
13 Articles
13 Articles
Coverage Details
Total News Sources13
Leaning Left1Leaning Right1Center3Last UpdatedBias Distribution60% Center
Bias Distribution
- 60% of the sources are Center
60% Center
L 20%
C 60%
R 20%
Factuality
To view factuality data please Upgrade to Premium









