Second iOS exploit kit now in use by suspected Russian hackers

A second iOS exploit kit, known as DarkSword, has been discovered in use by suspected Russian hackers, marking a significant escalation in the threat landscape. This kit, like its predecessor Coruna, targets iOS devices, with estimates suggesting up to 270 million iPhone users may be vulnerable due to outdated software, specifically those running iOS 18 or earlier versions. The research, a collaborative effort between iVerify, Lookout, and Google, reveals a troubling trend in the adoption of exploit kits by nation-state actors. The use of these kits, potentially developed with tools originating from the US government¹, underscores the gravity of the situation. The fact that 15% of all iOS devices in use are running outdated versions, making them susceptible to such exploits, highlights the need for urgent attention to device security. This development matters to practitioners as it underscores the importance of prompt software updates and robust security measures to mitigate the risk of compromise.