New iOS Exploit 'DarkSword' Hits Multiple Countries

A sophisticated full-chain iOS exploit named DarkSword, leveraging four zero-day vulnerabilities, has recently been deployed in real-world attacks affecting multiple countries. This exploit is confirmed to target devices running iOS versions 18.4 through 18.7. Earlier exploit chains, such as Coruna, continue to impact older iOS versions, specifically targeting iOS 13 up to 17.2.1.

The emergence of DarkSword follows a pattern observed with previous exploit kits, indicating that advanced iOS exploits, once held by state actors, are increasingly becoming accessible to a wider range of malicious actors. These exploits are being distributed at scale, primarily through watering-hole attacks where legitimate websites are compromised to distribute the malicious payload.

Victims are typically compromised by simply visiting an infected website. The scope of DarkSword's current targets includes Ukraine, Saudi Arabia, Turkey, and Malaysia. The risks extend to personal data, including sensitive cryptocurrency holdings, emphasizing the critical need for robust cybersecurity measures for all iOS users.