Researchers uncovered P7 DarkSword, a stealthier iOS exploit kit variant that adds on-device keychain and crypto-wallet theft along with two-way command-and-control communication. The kit has been used by multiple threat actors against targets in Saudi Arabia, Turkey, Malaysia, Ukraine, and China, while Censys also linked related infrastructure to Coruna and a Chinese-speaking exploitation-as-a-service operation. #DarkSword #P7DarkSword #Coruna #PARSDefense #StarBlizzard #COLDRIVER
Keypoints
- P7 DarkSword reduces its on-device footprint and improves stealth.
- The new variant steals keychain data and crypto-wallet information on the device.
- It uses two-way C2 communication and polls for commands every 15 seconds.
- DarkSword has been used in campaigns against iPhone users in multiple countries.
- Censys linked related infrastructure to Coruna and a Chinese-speaking exploitation-as-a-service operation.
Read More: https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html