Google Uncovers DarkSword iOS Exploit Targeting Crypto Apps

Google researchers have discovered an iOS exploit chain named DarkSword, which utilizes six vulnerabilities to install malware on iPhones operating on iOS versions 18.4 through 18.7. According to NS3.AI, the malware, known as Ghostblade, is designed to search for major cryptocurrency exchange and wallet applications, while also stealing messages, passwords, browsing data, and other device information. The campaigns have been observed in Saudi Arabia and Ukraine. Ghostblade is engineered for rapid data theft rather than prolonged surveillance.