BlockBeats says mobile web posts were cloned and injected with DarkSword malicious script
- —On October 22 BlockBeats mobile web posts were cloned and replaced with duplicates carrying an external script
- —GCSA spotted the suspicious script on BlockBeats search pages and tied it to DarkSword code
- —Google Threat Intelligence says DarkSword exploits iOS flaws and delivers follow-on code from web pages
- —BlockBeats removed the copies, tightened external script review and urged iOS users to update
Why it matters: The incident shows crypto media pages can be used to deliver iOS exploits without wallet prompts, raising security risks for users.
Source: TokenPost