Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

DarkSword and Coruna iOS exploits continue to attack crypto wallets

Дата публикации: 09-10-2026 17:54:38

Macworld



A new report by security researchers at Censys warns that the DarkSword exploit on iOS continues to be used in conjunction with Coruna malware to steal cryptocurrency wallets. Discovered earlier this year, DarkSword/Coruna is a dual-edged hacking toolkit. DarkSword attacks WebKit and JavaScriptCore to access iOS’s SpringBoard that managing app launch and the Home screen. Coruna is the payload used to steal crypto wallet information.
Censys’ research found several servers that had DarkSword/Coruna deployment directories. Wallet apps being targeted include Bitpie, Coinbase, Exodus, imToken, MetaMask, Phantom, Trust Wallet, Uniswap, and OKEx. According to the site’s researchers, the exploit’s main purpose is wallet theft and also “mines Photos and Notes for BIP39 recovery phrases.”
As we reported back in March, old versions of iOS are vulnerable to DarkSword. All of the security holes used by DarkSword have been fixed as of iOS 26.3 (the current version is iOS 27.0.1). Users of older versions of iOS 26, iOS 18, and earlier may be vulnerable.
How to protect your iPhone from malware
The easiest task to perform to secure your iPhone is to update the operating system. iOS can be updated in the Settings app by tapping General > Software Update. Apple also has a separate method for installing immediate security patches called Background Security Improvements. It is located in Settings > Privacy & Security, scroll to the bottom to find Background Security Improvements. Macworld has a list of tips for keeping your iPhone secure.


Основное содержимое страницы с новостью.

When you purchase through links in our articles, we may earn a small commission. This doesn't affect our editorial independence.

Roman Loyola

Senior Editor, Macworld

News

Oct 9, 2026

A new report by security researchers at Censys warns that the DarkSword exploit on iOS continues to be used in conjunction with Coruna malware to steal cryptocurrency wallets. Discovered earlier this year, DarkSword/Coruna is a dual-edged hacking toolkit. DarkSword attacks WebKit and JavaScriptCore to access iOS’s SpringBoard that managing app launch and the Home screen. Coruna is the payload used to steal crypto wallet information.

Censys’ research found several servers that had DarkSword/Coruna deployment directories. Wallet apps being targeted include Bitpie, Coinbase, Exodus, imToken, MetaMask, Phantom, Trust Wallet, Uniswap, and OKEx. According to the site’s researchers, the exploit’s main purpose is wallet theft and also “mines Photos and Notes for BIP39 recovery phrases.”

As we reported back in March, old versions of iOS are vulnerable to DarkSword. All of the security holes used by DarkSword have been fixed as of iOS 26.3 (the current version is iOS 27.0.1). Users of older versions of iOS 26, iOS 18, and earlier may be vulnerable.

How to protect your iPhone from malware

The easiest task to perform to secure your iPhone is to update the operating system. iOS can be updated in the Settings app by tapping General > Software Update. Apple also has a separate method for installing immediate security patches called Background Security Improvements. It is located in Settings > Privacy & Security, scroll to the bottom to find Background Security Improvements. Macworld has a list of tips for keeping your iPhone secure.

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1New DarkSword Spyware Variant Targets Unpatched iPhones via Zero-Click WebKit Exploits010.7709-10-2026
2Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks06.9728-09-2026
3iOS 27 fixes 122 security vulnerabilities, including serious kernel flaws015.1514-09-2026
4iOS 26.7.1 & iPadOS 26.7.1 Security Updates Released014.329-09-2026
5Intego ONE Review: Top-tier Mac malware protection with powerful Firewall controls028.8608-10-2026
6Daily Hacker News for 2026-09-2809.4229-09-2026
7Найдена 0Day в iPhone, которую уже могли применять в целевых атаках06.2729-09-2026
8This Week in Security: FBI Gets Hacked, Muse Vulnerable to ClickFix, Popular Rust Developers at Risk, and New Attacks Against RSA030.125-09-2026
9iOS 27: What’s new, what’s in the latest beta and what’s coming next013.6203-10-2026
10MacSync malware steals passwords and crypto wallet data05.8721-09-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 12.38. Источник: www.macworld.com.