Inside DarkSword: A New iOS Exploit Kit Delivered Via Compromised Legitimate Websites

Created 3/18/2026 at 5:49:09 PM

Upon navigation to a malicious website on an iPhone with a vulnerable iOS version (18.4 - 18.6.2) and IP address from Ukraine we triggered the execution of the exploit. This is a scenario of a waterhole attack.

Public