What is the DarkSword exploit and what does it target?

DarkSword is a full-chain iOS exploit utilizing four zero-day vulnerabilities, and it is actively targeting devices running iOS versions 18.4 through 18.7.

Which countries have been affected by the DarkSword exploit?

As of the latest reports, attacks involving the DarkSword exploit have been confirmed in Ukraine, Saudi Arabia, Turkey, and Malaysia.

How are users affected by the DarkSword exploit?

Users are typically compromised by visiting a compromised legitimate website, putting their data, including cryptocurrency, at risk.

Home / Technology / New iOS Exploit 'DarkSword' Hits Multiple Countries

New iOS Exploit 'DarkSword' Hits Multiple Countries

19 Mar

•

Summary

DarkSword, a new iOS exploit, targets devices running iOS 18.
This exploit is already being used in real-world attacks.
Attacks have been reported in Ukraine, Saudi Arabia, and Turkey.

New iOS Exploit 'DarkSword' Hits Multiple Countries

A sophisticated full-chain iOS exploit named DarkSword, leveraging four zero-day vulnerabilities, has recently been deployed in real-world attacks affecting multiple countries. This exploit is confirmed to target devices running iOS versions 18.4 through 18.7. Earlier exploit chains, such as Coruna, continue to impact older iOS versions, specifically targeting iOS 13 up to 17.2.1.

The emergence of DarkSword follows a pattern observed with previous exploit kits, indicating that advanced iOS exploits, once held by state actors, are increasingly becoming accessible to a wider range of malicious actors. These exploits are being distributed at scale, primarily through watering-hole attacks where legitimate websites are compromised to distribute the malicious payload.