DarkSword is a sophisticated iOS exploit kit that uses aggressive "hit-and-run" tactics for financially motivated attacks, deployed by the same actors behind the Coruna spyware. It specifically targets newer iOS versions 18.4 through 18.7. The article does not provide a CVSS score, fixed version, or specific workaround, but notes active campaigns are linked to state-sponsored and commercial surveillance actors targeting users in Ukraine, Saudi Arabia, Turkey, and Malaysia.
Recent threat intelligence from Google has unveiled DarkSword , a highly sophisticated new iOS exploit kit. Deployed by the same threat actors behind the Coruna spyware , DarkSword represents a dangerous evolution in mobile attacks. While Coruna focused on long-term surveillance of older devices, DarkSword targets newer operating systems (18.4 through 18.7) using aggressive, financially motivated "hit-and-run" tactics. Currently, intelligence links active DarkSword campaigns to state-sponsored and commercial surveillance actors heavily targeting users in Ukraine, Saudi Arabia, Turkey, and Malaysia.