A brand new iPhone hacking device places anybody nonetheless on iOS 18 in danger

Google and cybersecurity corporations Lookout and iVerify have detailed a brand new hacking method that probably places a good portion of iPhone customers in peril, simply by visiting the incorrect internet web page. The hack is known as “DarkSword” and because it particularly targets a number of totally different variations of iOS 18, it might have an effect on “near 1 / 4 of iPhones,” Wired writes.

DarkSword is a “fileless” hack that leverages a group of exploits to entry delicate information when an iPhone visits an contaminated web site. Somewhat than set up spyware and adware that hangs round on a person’s telephone after messages and different personal info are stolen, fileless hacks like DarkSword take management of “the legit processes in an iPhone’s working system to steal information,” in keeping with Wired. Much more troubling, DarkSword deletes any proof it was operating on an iPhone after it finishes stealing your info.

The hack begins as quickly as an iOS gadget encounters an “malicious iframe embedded in an internet web page,” after which it really works its approach by means of your iPhone, gathering delicate info like passwords earlier than deleting itself. DarkSword can abscond with issues like messages and iCloud content material, however it’s additionally particularly designed to entry crypto foreign money wallets, Lookout says, which might point out who was utilizing DarkSword earlier than it grew to become broadly out there.

DarkSword has reportedly been utilized in Ukraine, Saudi Arabia, Malaysia, Turkey and Russia, and its origins may very well be tied to a unique hacking toolkit known as Coruna that TechCrunch experiences could have been created for the US authorities by an organization known as Trenchant. No matter the place DarkSword got here from, the device did not turn out to be broadly out there till its Russian customers left DarkSword’s supply code on an internet site for anybody to entry, “full with explanatory feedback in English that describe every part and embrace the ‘DarkSword’ title for the device,” Wired writes.

Apple patched the exploits that DarkSword and Coruna utilized in latest updates to iOS 26, the yearly software program launch from 2025 that adopted iOS 18. The issue is that not everyone seems to be utilizing Apple’s newest replace. DarkSword targets iOS 18 releases between iOS 18.4 and iOS 18.6.2, and in keeping with Apple’s newest iOS utilization stats for builders, round 24 % of iOS units are nonetheless on iOS 18. With out extra element, it is exhausting to know the way many individuals that leaves uncovered, however as a rule of thumb, in case your iOS gadget can replace to a more recent software program launch, it is best to achieve this as quickly as attainable to remain safe.