GoKawiiliVerify finds new P7 DarkSword iPhone spyware variant in active attack
iVerify disclosed a new variant of the DarkSword iPhone exploit chain, dubbed P7 DarkSword, after finding it on the iPhone of a financial-institution employee two months ago. The company says P7 extends compatibility to iOS 18.7, beyond the iOS 18.6 limit of the variant it had previously tracked, and is being spread via malicious ads in watering-hole attacks rather than targeting specific individuals.
GoKawiil's interpretation of the reporting above, not reported fact.
The discovery suggests DarkSword's operators are continuing to update their tooling even after Apple patched earlier versions, which could mean unpatched or newly vulnerable devices remain at risk. Because iVerify says P7 is distributed through broad ad-based watering-hole campaigns rather than precision targeting, a wider pool of users—not just high-profile targets—may be exposed.
- iVerify identified P7 DarkSword, a new variant of the earlier DarkSword iPhone exploit chain.
- P7 reportedly works on iOS 18.7, extending beyond the iOS 18.6 cutoff of the previously tracked variant.
- The variant is allegedly spread via malicious ads in watering-hole attacks, exposing a broader set of victims rather than targeted individuals.
Apple iPhone 16 — If you're worried about spyware exploits like DarkSword targeting outdated iOS versions, running the latest supported iPhone hardware ensures you get Apple's newest security patches promptly. Keeping your device updated is the best defense against these sophisticated exploit chains, and newer iPhones typically receive priority support for critical security fixes.
See Apple iPhone 16 on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: 9to5mac.com — Marcus Mendes, 2026-10-08
Published there as: “Researchers uncover new DarkSword spyware variant affecting unpatched iPhones”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.