DarkSword Exploit Targets Crypto Apps on Unpatched iPhones
- Google researchers identified an iOS exploit chain called DarkSword affecting iPhones with iOS versions from 18.4 to 18.7.
- The exploit delivers Ghostblade malware, which specifically targets major crypto exchange apps like Binance, Kraken, and Coinbase.
- Ghostblade also seeks out popular crypto wallet applications such as Ledger, Trezor, and MetaMask.
- Campaigns using DarkSword have been reported in countries including Saudi Arabia, Turkey, Malaysia, and Ukraine.
- Ghostblade is designed for rapid data theft, exfiltrating a wide range of personal data before self-terminating.
The DarkSword exploit poses a significant threat to users of cryptocurrency apps on unpatched iPhones by delivering the Ghostblade malware through compromised websites. This malware not only targets well-known crypto exchange platforms but also popular wallet applications, highlighting the importance of keeping devices updated to mitigate such vulnerabilities.
With targeted campaigns observed in multiple countries and the ability to steal extensive personal data quickly, this exploit underscores the ongoing risks faced by crypto users worldwide who do not maintain up-to-date security practices on their devices.
