SlowMist: DarkSword trojan weaponizes public exploit against iOS crypto wallets
- —DarkSword-PROV2 surfaced on GitHub in July 2026 after exploit code went public
- —Its attack infrastructure was observed live in late September
- —The kit targets keychain, files and decrypts wallet data to drain funds
- —SlowMist says keys should be treated as compromised after visiting a suspicious landing page
Why it matters: A public exploit has lowered the bar for iOS wallet attacks, so users should update immediately and move funds to a clean device.
Source: ChainCatcher 链捕手