**
A recent analysis has unveiled a sophisticated spyware, dubbed “Darksword,” capable of compromising the security of potentially hundreds of millions of Apple iPhones. This alarming revelation, made by cybersecurity experts, highlights the rising trend of advanced malware targeting mobile devices, particularly as the digital landscape continues to evolve. With this new threat surfacing alongside another spyware, “Coruna,” the implications for user security and personal data protection are significant.
The Emergence of Darksword
Researchers from Lookout, iVerify, and Google have identified Darksword, which has been found on numerous Ukrainian websites over the past few weeks. This latest spyware is particularly concerning as it appears to be linked to a broader market for sophisticated hacking tools aimed at stealing sensitive information, including cryptocurrency wallet details.
Justin Albrecht, a principal researcher at Lookout, noted the troubling trend of recent exploits falling into the hands of potentially criminal entities. “There’s now a verified pipeline of recent exploits that have ended up in the hands of potentially criminal entities with a financial focus,” he stated, underscoring the gravity of the situation.
Campaigns Targeting Multiple Nations
Google’s investigation revealed that Darksword is being utilised by various commercial vendors and suspected state-sponsored hackers against targets in countries such as Saudi Arabia, Turkey, Malaysia, and Ukraine. The Turkish commercial surveillance vendor, PARS Defense, has been specifically implicated in the campaigns targeting Malaysia and Turkey, although the company has not yet responded to requests for comment.
The spyware primarily affects iPhones operating on iOS versions between 18.4 and 18.6.2, which were released between March and August 2025. Researchers estimate that between 220 million to 270 million iPhones could be running these vulnerable versions, primarily due to many users neglecting to install the critical software updates provided by Apple.
Apple’s Response and User Responsibility
In light of the findings, Apple has reiterated the importance of updating devices to safeguard against such vulnerabilities. An Apple spokesperson highlighted that the exploits target “out-of-date software,” emphasizing that the company has addressed the underlying vulnerabilities in numerous updates over the past few years. “Keeping software up to date remains the single most important thing users can do to maintain the high security of their Apple devices,” the spokesperson advised.
Moreover, Apple has implemented measures to block all malicious domains identified by Google through its Safari web browser, further protecting users from potential exploitation.
The Broader Implications of Darksword
The discovery of Darksword and Coruna within a short time frame raises concerns about an emerging ecosystem of malware tools that were once primarily associated with state-level intelligence operations. Rocky Cole, co-founder and COO of iVerify, pointed out the unprecedented accessibility of such powerful exploits, suggesting a shift in the landscape of cyber threats.
He stated, “The fact that they don’t care if it gets burned, and that they’re using them in mass attacks with poor operational security, that says a lot about how much they value these tools.” This mentality of recklessness indicates a worrying trend where sophisticated hacking techniques are becoming more readily available, potentially leading to a surge in cybercrime.
Why it Matters
The implications of the Darksword spyware discovery extend far beyond the immediate threat to individual iPhone users. As these advanced tools become more accessible, the landscape of cyber threats is shifting towards a more perilous environment. The need for robust cybersecurity measures and user education is paramount. With millions of devices potentially at risk, users must prioritise software updates and remain vigilant against these evolving threats. The rise in sophisticated malware signifies a critical moment for both tech companies and consumers to reinforce their commitment to security in an increasingly digital world.
