All articles tagged with #exploit kit
Apple warns that outdated iPhones are vulnerable to web-based attacks from Coruna and DarkSword exploit kits delivered via compromised websites; users should update to the latest supported iOS/iPadOS versions (or apply the Critical Security Update for older devices) and enable Lockdown Mode if updating isn’t possible to minimize exposure.
DarkSword is a JavaScript-based iOS exploit kit targeting iPhones on iOS 18.4–18.7 via watering-hole campaigns, chaining six vulnerabilities to achieve remote code execution, escaping the WebContent sandbox through the GPU into mediaplaybackd, escalating to kernel privileges, and then loading a data-collection module to exfiltrate a wide range of information (including emails, iCloud data, messages, wallet data, photos, contacts, and more) before cleaning up. Used by UNC6353 and linked groups such as UNC6748 and PARS Defense, the kit underscores a growing market for high-end iOS exploits and rapid, non-persistent data theft.