Security· ★★★· bearish·

DarkSword iPhone Exploit Still Targets Crypto Wallets

  • —Affected wallets include Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, Uniswap, Bitpie, imToken and OKEx
  • —Coruna scans photos and notes for BIP39 recovery phrases
  • —WebKit and JavaScriptCore vulnerabilities were patched in iOS 26.3
  • —Devices on iOS 26.2 and below, including older iOS 18 builds, remain vulnerable
Why it matters: Users of older iPhones should update immediately: a stolen seed phrase gives attackers access to funds even without physical device access.
Source: U.Today
More on this
Security · Sep 22
SlowMist warns DarkSword exploit may target Bitcoin wallets on iOS 26.5
 Security · Sep 23
SlowMist: DarkSword malware targets iPhones, FOMO app stole seed phrases from App Store
 Security · Sep 21
Ledger CTO Warns of DarkSword iOS Exploit Stealing Crypto via Safari