Many people assume iPhones are immune to cyberattacks, but a newly uncovered exploit known as DarkSword is a reminder that no device is completely safe.
According to researchers from Google, Lookout, and iVerify, DarkSword targets iPhones running older versions of iOS, specifically versions 18.4 through 18.6.2. Unlike many scams that rely on tricking users into installing fake apps or clicking suspicious links, this attack can begin simply by visiting a compromised website.
If an unpatched iPhone lands on one of these malicious sites, attackers can quietly exploit multiple security flaws to gain control of the device. The process happens behind the scenes, giving victims little or no indication that anything is wrong.
Once attackers gain access, they may be able to steal text messages, contact lists, photos, call history, files stored in iCloud, and even credentials used to access cryptocurrency wallets. By chaining together several software vulnerabilities, DarkSword can obtain elevated privileges that give attackers broad access to the device.
Security researchers estimate that between 220 million and 270 million iPhones worldwide could be vulnerable if they have not been updated. Reports also indicate the exploit has been used not only by cybercriminals but also in government-backed surveillance campaigns targeting individuals in multiple countries.
Fortunately, there is good news.
Apple has already released security updates that patch the vulnerabilities used by DarkSword, and browsers such as Safari have blocked known malicious websites associated with the attack. For users who have installed the latest iOS updates, the risk from this specific exploit has been significantly reduced.
If you're unsure whether your iPhone is up to date, take a moment to check. Open Settings > General > Software Update and install any available updates.
Cybercriminals are constantly looking for devices running outdated software because they are often the easiest to compromise. Keeping your iPhone updated remains one of the simplest and most effective ways to protect your personal information from the latest threats.
SUBSCRIBE TO WEEKLY NEWSLETTER
