started · updated
DarkSword malware targets iPhone crypto users via 1,500 phishing sites
Blockchain security firm SlowMist has identified over 1,500 phishing websites associated with a malicious iOS attack tool known as ‘DarkSword’. These fraudulent sites impersonate major cryptocurrency exchanges such as Binance and OKX, as well as e-commerce platforms, gaming services, and digital wallets to deceive users.
DarkSword exploits vulnerabilities in the iOS operating system to bypass application sandboxing. Once the security restrictions are breached, the malware can steal sensitive data stored on iPhones and iPads, including Keychain credentials, private keys for cryptocurrency wallets, and information from the Notes app.
Security researchers indicate that specific iOS versions, including 18.6 through 18.7.2 and 26.0 through 26.1, may be particularly vulnerable. SlowMist advises users to update their iOS devices to the latest version immediately, remain cautious of suspicious links or compromised applications, and avoid storing sensitive seed phrases or private keys in the device’s Notes app.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [○ 1 SOURCE] SlowMist identified over 1,500 phishing sites related to the DarkSword attack tool. bittimes.net
- [○ 1 SOURCE] The malware can steal Keychain credentials, private keys, and Notes app data. bittimes.net
- [○ 1 SOURCE] DarkSword exploits iOS vulnerabilities to bypass application sandboxing. bittimes.net
- [○ 1 SOURCE] Phishing sites impersonate Binance and OKX exchanges. bittimes.net