Darksword malware can be used by bad actors to compromise your bitcoin wallet

[_act_]

Not like the recently Coruna that can compromise more iOS versions, this malware can compromise iOS 18.4 to 18.7 devices. The malware does not need to be installed on your iOS device, all you need to do is to visit the infected website for the malware to do its work. It is a spyware. These are the most important information that you need about the malware.

See more of what the malware can do:

DarkSword can be used to siphon all sorts of personal data from an iOS device to a nefarious actor. Call logs, contacts, calendars, notes, photos, screenshots, location history, web browser history, signed in account identities, device keychains, SIM card info, Find My Phone settings, WiFi passwords, iCloud content, and more can be sent to the threat actor through this attack. iMessage data, email, WhatsApp data, Telegram data, and even cryptocurrency wallet credentials can also be stolenl.

The warning is also from Google:
https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain

[lovesmayfamilis]

This is the case when you should update your devices immediately. I know several smartphone owners who stubbornly refuse to update, claiming that they have read many articles on the Internet saying that after updating their smartphones, they can turn into a brick, but these exploits, which are several in one package, should make such people learn to trust developers and update their devices regularly.

It is also better to use other browsers, as they write that the exploit kit begins its attack in Safari.

And this case completely breaks the perception of people, including me, that it is impossible to "get in trouble" just by visiting a website without interacting with the clicks on that website. As it seems, everything is getting very serious every year.

FIRST USER:  argued that such phishing scam drains it victim money from wallet automatically in a quick instant on connecting to the fake site.

SECOND USER: argued that connecting your wallet alone to a phishing site does not automatically drain it, ontil you the victim have to perform a signing in your of your information or wallet private key.

[Outhue]

Been smart is accepting that hardware wallet are not longer an option, it's now a must if you know what you are doing, I am surprised by how people are still using smartphones to store Bitcoin when there is always a bad news about smartphones and malware every week, it's now a very important step to take, say goodbye to smartphone for keeping Bitcoin, they are no longer safe for long term holds.

It's either you choose to deal with these problems every week, with unrestless mind, worrying if your wallet is going to be compromised or not or safe yourself the headache and buy a hardware wallet, it's not going to break the bank as they cost around $60 and more.

[coinlary]

Now, this is an addition to the list of Iphone vulnerabilities, specifically for iOS 18. Although after going through the article, it is somehow related to a JavaScript thing majorly, perhaps just dissabling JavaScript helps break it .

I need to update the corona exploits  list on my thread too as DarkSword seems to be already observed as added to the recent Coruna exploit kit , following this : ""Notably, UNC6353, a suspected Russian espionage group previously observed using Coruna, has recently incorporated DarkSword into their watering hole campaigns."" - - source

My iOS should be 18+, which means I should be safe from the attack if the report is right, but I will still have to upgrade mine to iOS 26.3.

Hey mate!  I think your device has been vulnerable  since November 2025 . Time to update .

[ABCbits]

The malware does not need to be installed on your iOS device, all you need to do is to visit the infected website for the malware to do its work.

This is more serious than other malware reported here, which usually either require physical device access or the victim must install app/run script first.

This is the case when you should update your devices immediately. I know several smartphone owners who stubbornly refuse to update, claiming that they have read many articles on the Internet saying that after updating their smartphones, they can turn into a brick, but these exploits, which are several in one package, should make such people learn to trust developers and update their devices regularly.

I rarely see people who refuse to update because it'll break their device, usually i hear different reason such as the update will make their phone slower. Some even speculate it's done intentionally by the phone company so you have more reason to buy their newer phone.

[Aanuoluwatofunmi]

Spyware is another extreme level of scam and this hackers are just developing more advanced means to ensure that the hack into our devices and take in our assets, this shows that we should avoid unnecessary site visits, unsolicited links or download of any kind, all this may post a serious danger to our device and from there they could easily phish into our wallet and hack it, information is better and profitable when we are want earlier before we becomes the victim.

[sleepfirefly]

Been smart is accepting that hardware wallet are not longer an option, it's now a must if you know what you are doing, I am surprised by how people are still using smartphones to store Bitcoin when there is always a bad news about smartphones and malware every week, it's now a very important step to take, say goodbye to smartphone for keeping Bitcoin, they are no longer safe for long term holds.

It's either you choose to deal with these problems every week, with unrestless mind, worrying if your wallet is going to be compromised or not or safe yourself the headache and buy a hardware wallet, it's not going to break the bank as they cost around $60 and more.

those who store their bitcoins in their smartphones most likely aren't thinking of storing them for the long term. they might want to trade it or sell it later in the future. what i can think of as a solution if they want easy access is to just have another smartphone. don't use the smartphone you hold your bitcoin in for personal uses and instead use another one. this way, you wouldn't have to risk entering a website and leaking your personal information.

[lovesmayfamilis]

This is the case when you should update your devices immediately. I know several smartphone owners who stubbornly refuse to update, claiming that they have read many articles on the Internet saying that after updating their smartphones, they can turn into a brick, but these exploits, which are several in one package, should make such people learn to trust developers and update their devices regularly.

I rarely see people who refuse to update because it'll break their device, usually i hear different reason such as the update will make their phone slower. Some even speculate it's done intentionally by the phone company so you have more reason to buy their newer phone.

I will show you several resources where it has been publicly stated that it is "dangerous" to upgrade for a while.
I understand that this is a kind of "stuffing," especially for the Russian-speaking locale, but anyway, you can see this for yourself. After reading such news, some people I know really start to get "paranoid."

https://www.cnews.ru/news/top/2026-02-26_obnovlenie_proshivki_prevrashchaet
https://lenta.ru/news/2025/06/11/polzovateli-predupredili-o-prevraschenii-iphone-v-kirpich-iz-za-obnovleniya/
https://www.gazeta.ru/tech/news/2025/10/11/26934098.shtml?utm_auth=false

[Nwada001]

My iOS should be 18+, which means I should be safe from the attack if the report is right, but I will still have to upgrade mine to iOS 26.3.

Hey mate!  I think your device has been vulnerable  since November 2025 . Time to update .

lol… I did not even allow it to get to the next week; I have upgraded to 26.3. Even so, I'm still very careful; we don't know which vulnerabilities already exist and which have not yet been discovered.

I rarely see people who refuse to update because it'll break their device, usually i hear different reason such as the update will make their phone slower. Some even speculate it's done intentionally by the phone company so you have more reason to buy their newer phone.

Personally, I like to update my phone each time I receive a notification about the update, but there is always one thing that delays it from happening on my end and a few others that I have seen, and that's storage. The amount of storage some of the new versions ask for will require you to get many things deleted, especially when you are using a mobile with less than 128 GB of storage.

[rdluffy]

I actually checked here to see which version of iOS is on my phone, and it’s the latest one, version 26.3.1

This version 18 is from 2024, right?
It’s always important to keep your iPhone or any other phone up to date, which would be easy, except in cases where Apple itself no longer allows updates 

This part is really scared to be honest:

The malware does not need to be installed on your iOS device, all you need to do is to visit the infected website

[Mia Chloe]

This is the case when you should update your devices immediately. I know several smartphone owners who stubbornly refuse to update, claiming that they have read many articles on the Internet saying that after updating their smartphones, they can turn into a brick, but these exploits, which are several in one package, should make such people learn to trust developers and update their devices regularly.

There's a strong validity to both sides of this argument. Updates brick some devices the lesser the hardware specs of the device the higher the possibility of you facing performance issues as time passes if you continue to update. If you are using a flagship you wouldn't notice this till you stop getting updates.

But for midrange and especially budget phone users it's like a default issue. Most times being safe from these flaws is mostly luck and cautiousness not really updates.

[coinlary]

My iOS should be 18+, which means I should be safe from the attack if the report is right, but I will still have to upgrade mine to iOS 26.3.

Hey mate!  I think your device has been vulnerable  since November 2025 . Time to update .

lol… I did not even allow it to get to the next week; I have upgraded to 26.3. Even so, I'm still very careful; we don't know which vulnerabilities already exist and which have not yet been discovered.

Well, it's  another concern but it's  still better  than daring the known , no choice  than updating.

From same article it was noted that all  vunerabilities were Patched in 26.3 even though some were already Patched before  then, we just have to believe them and hope they keep on patching lol.

This literally show that  you shouldn't gamble with  keeping so much funds on mobile wallet, it probably  won't  end well with the way the attacks keep growing. If it eventually targets everyone  in the future,  you would be sure you're not losing that much. There's more to be concerned  that wallet btw