PANews, October 19: Mudae has released an analysis of the DarkSword malware backend and iOS attack chain. In March 2026, exploit code related to DarkSword was publicly disclosed; in July of the same year, DarkSword-PROV2 appeared on GitHub; by late September, researchers discovered that its attack infrastructure had been deployed in active operations. Mudae tracked this attack infrastructure, linked its management backend to the publicly available GitHub repository, and conducted an in-depth analysis of the exploit code, payload library, delivery chain, and post-compromise capabilities.
SlowMist Analyzes the DarkSword Trojan Backend and iOS Attack Chain
PANewsShare
Summary
On-chain analysis reveals SlowMist’s latest report on the DarkSword Trojan backend and iOS attack chain. In March 2026, exploit code was disclosed; by July, DarkSword-PROV2 appeared on GitHub. Researchers identified active infrastructure by late September. SlowMist traced the backend to a public GitHub repository, analyzing the exploit code, payloads, delivery chain, and post-attack functions. The Fear & Greed Index remains volatile as security threats evolve.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.