P7 DarkSword variant targets unpatched iPhones via malicious ads
Security firm iVerify has identified P7 DarkSword, a new variant of the iPhone exploit chain that targets devices running iOS 18.7. Discovered in August 2026 on a financial employee’s phone, this malware uses watering-hole attacks via malicious ads to infect users. It features enhanced stealth, direct on-device Keychain theft, and two-way command-and-control communication, allowing attackers to steal photos, notes, and crypto-wallet data.