GoKawiil
Tech News
iVerify disclosed a new variant of the DarkSword iPhone exploit chain, dubbed P7 DarkSword, after finding it on the iPhone of a financial-institution employee two months ago. The company says P7 extends compatibility to iOS 18.7, beyond the iOS 18.6 limit of the variant it had previously tracked, and is being spread via malicious ads in watering-hole attacks rather than targeting specific individuals.
Ahead of Friday's official iPhone Duo preorder launch, a fraudulent website mimicking Apple's design and offering a fake $500 discount is using the leaked DarkSword exploit chain to attack vulnerable, unpatched iPhones. Malwarebytes researchers say simply visiting the page can trigger an attack that harvests device data, notes, keychain credentials and cryptocurrency wallet files from apps like MetaMask, Phantom and Coinbase Wallet, then exfiltrates them to a remote server.
Security researchers at Malwarebytes have identified a fraudulent advertisement claiming Apple's unreleased iPhone Duo foldable can be preordered now for a $500 discount, even though Apple has said preorders start October 16 and sales begin October 23. The scam relies on the DarkSword exploit chain, which can steal data from vulnerable iPhones running iOS 18.4 to 18.6.2 simply by loading the malicious page, without requiring any clicks or typed input.