P7 DarkSword iOS exploit kit enables advanced device theft

Security researchers have revealed a new P7 DarkSword variant of the DarkSword iOS exploit kit, now found in the wild. This version reduces its on-device signature, can steal crypto wallet and keychain data directly from compromised iPhones, and establishes two-way communication with attackers. The spyware, used by multiple threat groups since late last year, targets unpatched devices in several countries and has been linked to both surveillance vendors and state-backed actors.

• P7 variant enables theft of crypto wallets and keychain data
• Reduces device footprint for improved stealth
• Used in attacks in Saudi Arabia, Turkey, Malaysia, Ukraine
• Targets unpatched iPhones with chained vulnerabilities