GoKawiilCybersecurity researchers from Google's Threat Intelligence Group and two cybersecurity firms, Lookout and iVerify, have identified a new hacking toolkit this week that makes iPhone owners' data vulnerable. The toolkit, called DarkSword, differs from other forms of spyware and malware.
DarkSword doesn't use phishing texts or emails, nor does it require you to download suspicious apps to let hackers into your device. It operates through infected websites, Google's report says, including ones made to look like Snapchat and government contractor sites. After you've browsed those sites, the spyware can be activated, and your information is at risk.
So far, the attacks have been limited to people outside the US, specifically in Saudi Arabia, Turkey, Malaysia and Ukraine, according to Google.
DarkSword is "highly sophisticated," Lookout said in its report. It works by "establish[ing] privileged code execution to access sensitive information and exfiltrate it off the device." DarkSword isn't designed for ongoing surveillance, but it can access a variety of data, including your messages, iCloud content and even crypto wallets.
Google said it was being used by "multiple commercial surveillance vendors and suspected state-sponsored actors."
In a support page published on Thursday, Apple said: "We thoroughly investigated these issues as they were found and released software updates as quickly as possible for the most recent operating system versions to address vulnerabilities and disrupt such attacks."
Google said in its report that it reached out to Apple in late 2025 with its findings.
Researchers found that vulnerable phones were running versions of last year's software, including iOS 18.4 through 18.7. That isn't every phone, but as Apple's own data confirms, approximately one-fifth of iPhone owners are still running iOS 18, leaving potentially millions of people vulnerable.
Keep your iPhone software updated
While Apple has applied fixes behind the scenes, you still need to take action to ensure your iPhone is safe. It's an easy but necessary step to keep your phone secure from external threats: Update your iOS software.
... continue reading