Press Enter to search · ESC to close

Crypto

SlowMist Warns Darksword Exploit Adapted to iOS 26.5 to Steal Wallet Keys

SlowMist chief information security officer 23pds said attackers are exploiting the Darksword vulnerability to bypass iOS security via Safari, take control of devices and extract private keys and other data from self-custody crypto wallets. The flaw, previously used against users in Saudi Arabia, Turkey, Malaysia and Ukraine, was originally disclosed as affecting iOS 18.4 to 18.7; 23pds said it has been adapted to iOS 26.5, though that claim is not officially verified.

Original source

AI take

The notable shift here is not the exploit itself but its persistence and reach: a flaw disclosed against older iOS versions is now claimed to work on a current one, suggesting the tooling is being maintained rather than abandoned. The targeting history across four countries points to a state-linked or mercenary pattern rather than opportunistic crime, which changes the threat model for self-custody holders who assume device security is sufficient. The unverified iOS 26.5 claim is the open question — whether Apple confirms or patches it will determine if this remains a regional campaign or becomes a broader mobile-wallet problem.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback