The DarkSword iOS exploit chain, a previously reported vulnerability, is now being proliferated and adopted by multiple threat actors. The article does not provide specific technical details on the exploit's attack vector, a CVSS score, affected iOS version ranges, a fixed version, or a workaround.
2026-03-18 (Back to Inventory) The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors Author(s): Google Threat Intelligence Group Organization: Google js.ghostblade Open article directly Related Articles 2026-03-03 ⋅ Google ⋅ Google Threat Intelligence Group Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Coruna 2026-03-03 ⋅ Google ⋅ Google Threat Intelligence Group Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Coruna UNC6353 UNC6691 2026-02-17 ⋅ Google ⋅ Daniel Sislo , Fernando Tomlinson , John Scarbrough , Jr. , Nick Harbour , PETER UKHANOV , Rich Reece From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day BRICKSTORM GRIMBOLT SLAYSTYLE UNC6201