SlowMist warns that the Darksword vulnerability now affects iOS 26.5, stealing wallet private keys.

According to ME News, on September 22 (UTC+8), 23pds, Chief Information Security Officer at blockchain security firm SlowMist, stated that attackers are exploiting the Darksword vulnerability to bypass iOS security mechanisms via Safari, gaining control of devices and extracting private keys and other data from self-custodied crypto wallets. This vulnerability was previously used in attacks targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine. Google Threat Intelligence Group previously disclosed that Darksword initially affected only iOS versions 18.4 to 18.7. 23pds noted that attackers have adapted the exploit to iOS 26.5, though this claim has not yet been verified by official sources. Attacks typically begin with social engineering, where users click on malicious links sent via social media or messaging apps, potentially granting attackers root access and enabling extraction of wallet data. Users should promptly update their mobile operating systems and avoid clicking on website links sent by strangers. Additionally, three investors lost nearly $1.8 million in Bitcoin after downloading fake wallet apps from Apple’s official App Store and have since filed a lawsuit against Apple. (Source: ChainCatcher)