Researchers uncover new DarkSword spyware variant affecting unpatched iPhones
iVerify released a report today detailing P7 DarkSword, a new variant of the malware associated with the DarkSword iPhone exploit chain uncovered earlier this year. Here are the details. more…
iVerify has uncovered a new variant of DarkSword spyware, dubbed P7 DarkSword, which targets unpatched iPhones. This variant, discovered recently while investigating an infection on a customer's iPhone, expands compatibility to iOS 18.7, surpassing the previous variant's support for iOS 18.6. P7 DarkSword employs stealthier operations, reducing its on-device footprint and improving stability, while also enhancing its data-stealing capabilities.
Notably, P7 can directly extract Keychain data and target crypto-wallet information from iPhones, whereas the earlier variant copied the entire Keychain database. Additionally, P7 introduces more advanced two-way communication with the attackers' command-and-control infrastructure, providing greater control over compromised devices.
This spyware is distributed through malicious ads in watering-hole attacks, affecting users who encounter compromised web content.
Written by urgent.news from 9to5Mac's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
