WiretechnologyPublisher preview
Threat Intelligence | Analysis of the DarkSword Trojan Backend and iOS Attack Chain
Background On March 18, 2026, Google Threat Intelligence Group published a report titled “The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors,” focusing on the spread of the DarkSword exploit chain among multiple threat groups.
Key points
- SlowMist analyzed the DarkSword iOS exploit chain, which Google Threat Intelligence Group reported on March 18, 2026, affecting iOS 18.4 through 18.6.2 via Safari.
- The report traces leaked code, GitHub repositories, a ready-to-deploy toolkit, admin panels, decoy sites and shared infrastructure resolving to one long-running server.
- SlowMist says the panel dashboard showed 6,115 visits, 57 devices, 10,125 theft records and 143,802 iOS logs across several countries and regions.
Read the full story
Dextape context
Built from Dextape’s own wire, stories and glossary.
Terms in this story
- Exploit
- An attack that abuses a bug or design flaw in a protocol to take funds.
Mentioned in this story
Open a coin page for its current price.