DREAM / The Prime Minister resigns and wakes up under the Parisian bridge!

 Kliko këtu për të tjera
Voxpress:

Google Alert: "DarkSword" Hits iPhones, One Click and Hackers Take Total Control

2026-03-20 13:26:48Lifestyle SHKRUAR NGA REDAKSIA VOX

Google Alert: "DarkSword" Hits iPhones, One Click and Hackers Take

Researchers at Google have identified an iOS exploit chain, dubbed DarkSword, that has been used since late last year by multiple actors to infect iPhones with malware in targeted attacks.

DarkSword combines six vulnerabilities in iOS and Safari to deploy malware on devices. This once again shows how important it is to stay up to date with updates.

The exploit works against iPhones running iOS versions 18.4 to 18.7, and simply visiting a malicious or compromised website with a vulnerable device could be enough to become infected (a "drive-by" attack).

Researchers found that several groups are using the tool to attack their preferred targets. DarkSword has been used by both commercial spyware vendors and state-backed actors, with campaigns observed in Saudi Arabia, Turkey, Malaysia, and Ukraine.

In Saudi Arabia, attackers used a fake Snapchat impersonation. In Ukraine, attackers compromised at least two Ukrainian websites, including a government website. After successful exploitation, malware is installed on the device. The type of malware depends on the attacker.

Vulnerable devices can be infected just by visiting that single malicious or compromised website. And the consequences can be severe. DarkSword turns a single visit to the website into a full compromise of the device, followed by Ghostblade extracting as much data as it can in a single move.

Data theft: Ghostblade and its associated payloads can capture communications (SMS, iMessage, Telegram, WhatsApp, email), photos, health data, location history, Wi-Fi credentials, keychain items, and more in a single swipe.

Cryptocurrency theft and profiling: Malware targets specific exchange and wallet applications, which allows both direct theft and allows criminals to use stolen information to build a detailed profile of financially interesting targets.

Forensic avoidance: Since Ghostblade erases its tracks after stealing all that information, it can take a long time for victims to realize that something is wrong. Many victims may never know they have been compromised.
Since the same exploit kit is being reused across commercial surveillance firms and state-affiliated actors, the number of campaigns and victims will grow over time.

settlement

Update to the latest iOS available for your device. DarkSword can affect iOS versions 18.4 through 18.7, and recent Apple releases include fixes for CVE‑2026‑20700 and related vulnerabilities.

If you have reason to believe that you are a potential target for attacks of this nature (journalists, activists, or people with access to sensitive data), it is advisable to activate Blocking Mode:

Open Settings
Select Privacy & Security
Scroll down, select Lockdown Mode, then click Turn On Lockdown Mode
Read the information presented and click Turn On Lockdown Mode
Click Turn On & Restart.
Enter your device password when prompted.

Be aware of the consequences of enabling Blocking Mode. This makes your device much less easy to use, but has been proven effective against highly targeted attacks. Only enable Blocking Mode if you have reason to believe that you are a potential target for attacks of this nature.


Në përputhje me standarded JTI

Video

SHIKO KANALIN NE YOUTUBE
×