Apple is urging iPhone users to update their devices to protect against new threats from hackers. Recent cybersecurity reports reveal that Russian intelligence and Chinese groups are using tools called DarkSword and Coruna to exploit older iOS versions. These tools allow hackers to gain remote access to phones, gathering sensitive information like passwords and messages.
iVerify, a cybersecurity advisory group, detailed how DarkSword functions as a surveillance tool. It can pull a broad range of data from infected phones. An Apple spokesperson emphasized the importance of keeping software updated, stating it’s crucial for maintaining device security.
Despite Apple’s reputation for strong security, older software can still leave users vulnerable. Research indicates that this hacking technique targets various groups, including Ukrainians and cryptocurrency users in different countries. Although there haven’t been reports of any Americans being targeted, experts believe anyone with outdated iOS could be at risk. John Scott-Railton from Citizen Lab noted that the barriers for such attacks have significantly lowered, making them more accessible for hackers.
Interestingly, the latest iOS release, iOS 26, aims to protect users from these specific exploits. Recently, Apple even rolled out a special update for older devices to block the hacking tools.
The attack methods used by these hackers are sophisticated. A common technique is the “watering hole attack,” where attackers compromise websites to infect visitors’ phones automatically. Although hacking an iPhone presents technical challenges, the complexity of these operations allows for simultaneous hacks.
The origins of both tools highlight the growing trend of cybercrime. Coruna was once part of military-grade hacking tools, sold illegally by a former defense contractor to Russian brokers, highlighting the blurred lines between state and criminal activities in the cyber realm. Meanwhile, DarkSword’s origins remain unclear but it has been linked to several campaigns affecting target groups in Ukraine and other regions.
Rocky Cole from iVerify pointed out that many still see iPhones as immune to hacking, but that view is misleading. “It’s a common misconception,” he said, stressing the need for constant vigilance in cybersecurity.
In today’s world, where threats are evolving rapidly, keeping your software updated is not just a recommendation—it’s a necessity. For further reading on the latest in cybersecurity, check out reports from trusted sources like Google Threat Intelligence and iVerify.

