SlowMist Discovers DarkSword iOS Safari Vulnerability Chain Targeting Crypto Wallets

icon MarsBit
Share
This is the logo of the coin.
BTC
$79,185.90-1.7%
This is the logo of the coin.
ETH
$2,448.77-1.52%
This is the logo of the coin.
SOL
$101.17-3.27%
This is the logo of the coin.
DOGE
$0.08441-3.52%
This is the logo of the coin.
XRP
$1.39-3.81%
AI summary iconSummary
SlowMist reported a new vulnerability involving the DarkSword exploit chain targeting iOS Safari browsers. Attackers exploited six vulnerabilities to remotely execute code and steal wallet data. On-chain alerts highlight risks to apps such as imToken and TronLink. Apple has released patches, and users are urged to update to iOS 18.7.3 or later. The attack leverages known vulnerabilities, and visiting a malicious site does not necessarily result in immediate key theft; forensic analysis is required to confirm data compromise.

HuoXing Finance reports that, according to the SlowMist Security Team, they have detected an attack campaign masquerading as a free VPS service, specifically targeting iPhone Safari browsers running iOS versions 18.4 through 18.6.2. The attackers exploit a complete attack chain composed of six vulnerabilities codenamed DarkSword, encompassing WebKit remote code execution, sandbox escape, and kernel read/write capabilities, enabling them to silently extract App container files and keychain data, and record keyboard inputs when wallets such as imToken, TokenPocket, or TronLink are in the foreground. SlowMist notes that all six vulnerabilities have since been patched by Apple, and the current attack represents the reuse of an n-day exploit chain. Simply visiting a malicious webpage does not definitively prove that recovery phrases or private keys have been compromised; device forensics are required for confirmation. iOS and iPadOS users are advised to upgrade their systems to version 18.7.3 or 26.3 and above as soon as possible.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.