Security· ★★★· bearish·

SlowMist finds over 1,500 phishing sites tied to DarkSword iOS attack

  • —SlowMist found over 1,500 phishing sites linked to DarkSword
  • —The exploit chains six iOS flaws to bypass the sandbox and steal seed phrases
  • —Affected versions are iOS 18.6–18.7.2 and iOS 26.0–26.1
  • —Apple fixed the flaws by iOS 26.3 and expanded iOS 18.7.7 rollout
Why it matters: iPhone users holding crypto wallets should update iOS immediately and move funds off any device used to open suspicious pages.
Source: CoinPost
More on this
Security · Oct 19
SlowMist: DarkSword trojan weaponizes public exploit against iOS crypto wallets
 Security · Sep 22
SlowMist warns DarkSword exploit may target Bitcoin wallets on iOS 26.5
 Security · Oct 2
SlowMist finds seed-phrase stealer in iOS app FomoPeek