
Recent security reports reveal the emergence of a new malware called “Darksword” targeting iPhone phones, which indicates a high level of cyber attacks against users of Apple devices.
Researchers from Google, in addition to cybersecurity companies iVerify and Lookout, discovered this software, which mainly aims to steal financial information, including digital currency wallet data.
Widespread spread
Reports indicate that this malware is capable of infecting hundreds of millions of devices, as attack campaigns have been monitored in multiple countries such as Türkiye, Malaysia, and Ukraine. These attacks rely on deceiving users through suspicious links and messages, which may even arrive from trusted contacts if their devices are hacked, which increases the risk of the software spreading, according to a report published by the “Phonearena” website.
Target devices and versions
The software targets devices running versions of iOS 18 between 18.4 and 18.6.2, i.e. relatively recent versions released during the year 2025, which means that the risk is not limited to older systems. Statistics estimate that about 270 million devices are still running these versions, making them vulnerable to attacks.
Apple’s response and preventive measures
Apple confirmed that the vulnerabilities exploited in these attacks have already been fixed through subsequent updates, stressing that updating the system is the best way to protect. The company added that it blocked malicious domains associated with the software through the Safe Browsing feature in the Safari browser, in order to prevent access to malicious websites.
Worrying developments in the world of hacking
The emergence of “Darksword” comes just days after the discovery of another hacking tool called “Coruna,” indicating the expanding market for tools used to exploit vulnerabilities in iOS systems. Cybersecurity experts stress that these tools, previously limited to intelligence agencies, are beginning to spread more widely, opening the door to more complex threats on a global level.
Experts advise users to avoid opening any suspicious links and to update devices continuously, as this is the first line of defense against increasing attacks.