A critical vulnerability has been discovered in iPhones running iOS 18.4–18.7, putting them at risk: simply visiting a compromised website is enough for data to be stolen. This is reported by Habr, citing a study by researchers who identified an exploit dubbed “DarkSword.”
The exploit leverages multiple system vulnerabilities to gain full control over a device. It siphons off everything accessible—passwords, notes, clipboard contents, cryptocurrency wallet seed phrases, and photos—often without the victim even realizing they have been compromised.
DarkSword emerged in late 2025. In one documented instance, a user lost access to their device after visiting a popular pornographic website.
It is worth noting that in the summer of 2026, the number of users whose smartphones were found to contain malicious software increased by 34% compared to the same period the previous year. Attackers remain highly active, aggressively driving traffic to phishing sites and compromising messaging accounts to carry out fraudulent schemes via phone calls.
About the Author
