P7 DarkSword spyware targets iPhone users and sensitive data

Security experts at iVerify have identified a new, aggressive variant of spyware known as ‘P7 DarkSword’ targeting iPhone users. The malware is capable of collecting highly sensitive information, including passwords stored in keychains, personal photos, notes, and data from cryptocurrency wallets, such as the imToken application.

According to reports, the spyware is designed for high levels of stealth, embedding components directly into the system to remove diagnostic logs and evade detection. It features a remote control component that checks for new commands from attackers, with a default polling interval of every 15 seconds. While originally a high-cost professional espionage tool used by specialized entities, a leak of its source code has reportedly made it accessible to cybercriminals.

Experts suggest the malware spreads through manipulated advertisements and compromised websites. To mitigate risks, users are advised to keep their iOS software updated to patch vulnerabilities, avoid clicking unknown links in text messages, and regularly review privacy and security settings.