P7 DarkSword Expands iPhone Espionage and Crypto Theft

Researchers have uncovered P7 DarkSword, an upgraded iOS exploit kit that steals Keychain records, cryptocurrency wallet data, photos, notes, and other sensitive information. The implant runs inside SpringBoard, communicates with its command-and-control server, and supports remote commands for file theft, device scanning, JavaScript execution, and application-data collection. Attackers have distributed the malware through deceptive websites and a hijacked analytics domain still referenced by legitimate online stores. The findings show that DarkSword is spreading among financially motivated operators, making prompt iOS updates and caution around suspicious links essential.

Reference: thehackernews.com, iverify.com