Apple Security Alert: New ‘DarkSword’ Exploit Targets Older iOS

DUBLIN (Azat TV) – An Garda Síochána, Ireland’s national police service, has issued an urgent security alert to Apple device users following the emergence of the ‘DarkSword’ exploit toolkit. The malware, which recently surfaced on a public code-sharing platform, allows unauthorized actors to bypass standard security measures and silently access sensitive data on devices running specific older versions of the iOS operating system.

The Threat of the DarkSword Exploit Toolkit

The DarkSword toolkit is a collection of software vulnerabilities that enables attackers to gain control over iPhones and iPads without any required interaction from the user. Security researchers, including Matthias Frielingsdorf of the mobile security firm iVerify, have confirmed that the toolkit is trivial to repurpose, as it relies on plain HTML and JavaScript code. Once deployed, the exploit can harvest a wide range of personal information, including messaging data, contacts, Wi-Fi passwords, email accounts, and cryptocurrency wallet credentials, before attempting to erase its own traces.

The current risk is heightened by the availability of the source code on public repositories, which lowers the barrier to entry for malicious actors. Experts note that the toolkit is designed to function with minimal technical expertise, making it a significant concern for users who have not applied the latest security patches.

Protecting Your Device Through iOS Updates

Apple has acknowledged the exploit and confirmed that it primarily impacts devices running older, out-of-date software—specifically iOS versions 18.4 through 18.7. To mitigate this risk, the company has released emergency security updates. Users are strongly urged to update their devices to iOS 26.3.1 or 18.7.6 immediately to ensure their hardware is protected against these specific techniques.

For those using older devices that no longer support the latest software releases, security experts recommend activating ‘Lockdown Mode.’ While this feature may restrict certain device functionalities, it serves as a critical defense mechanism against the exploit chains utilized by DarkSword. Authorities also advise anyone who suspects their device has been compromised to consult a cybersecurity professional and report the incident to local law enforcement.

Broader Security Implications for Mobile Users

The public availability of such exploit kits represents a shift in the threat landscape, where sophisticated tools once reserved for specialized actors are now accessible to a broader range of potential attackers. Beyond software updates, police are reminding users to maintain records of their device’s 15-digit IMEI number—accessible by dialing *#06#—to assist in recovery should a device be lost or stolen. The urgency of this warning underscores the necessity of proactive maintenance in an era where software vulnerabilities can be rapidly weaponized by bad actors across the globe.

The ease with which the DarkSword toolkit can be repurposed and deployed highlights a critical vulnerability in the lifecycle management of legacy mobile operating systems, where public access to exploit code now outpaces the speed at which the average user updates their hardware.