Google and two cybersecurity firms are sounding the alarm for iPhone users. A new hacking toolkit called DarkSword can steal personal data just by visiting a website. This threat affects iOS versions 18.4 to 18.7, which still run on almost a quarter of all iPhones, meaning hundreds of millions of devices could be at risk.
What sets DarkSword apart? Unlike typical malware, users don’t need to install anything. Simply visiting an infected site is enough for it to grab sensitive information, from contact lists to financial details. It’s important to note that DarkSword isn’t designed for long-term spying. Once it collects the data, it erases its traces quickly.
According to Lookout’s report, DarkSword operates swiftly to extract data, doing its job in minutes and then disappearing upon device reboot. This stealthiness makes it hard for everyday users to detect. Hackers can easily exploit vulnerabilities in this way, grabbing data while leaving almost no evidence behind.
The range of data at risk is alarming. DarkSword can access call logs, photos, emails, and even cryptocurrency wallet credentials. Cybersecurity expert Dr. Emma Rodriguez emphasizes the growing threat of such exploits. “We’re seeing an increase in these kinds of attacks because they are easy to execute and yield quick results,” she notes.
In recent events, DarkSword has been used in targeted attacks against users in Ukraine by a group linked to the Russian government. They compromised legitimate sites to sneak in the malware. Interestingly, the hackers behind DarkSword appear unconcerned about discovery, suggesting that further exploits could emerge from the same playbook.
This situation highlights a troubling trend in cybersecurity. According to a report by Cybersecurity Ventures, global cybercrime costs are expected to reach $10.5 trillion annually by 2025. This underscores the increasing vulnerability users face with every new exploit that surfaces.
For iPhone users, staying informed is crucial. Regular updates and awareness of potential threats can help protect sensitive information. As with any technology, vigilance and knowledge are key to staying safe in a digital world fraught with risks.

