DarkSword malware targets iPhones that haven’t been updated yet

Macworld The Google Threat Intelligence Group has posted a report about malware that uses six different security vulnerabilities to attack an iPhone. According to the report, a toolkit called DarkSword has been used to create three malware families called Ghostblade, Ghostknife, and Ghostsaber, and iPhones running iOS 18.4 to 18.7 are vulnerable. All of the security holes used by the DarkSword malware have been fixed as of iOS 26.3 (the current version is iOS 26.3.1); most of them were fixed before 26.3. The latest version of iOS is 18.7.6, released on March 4. GTIG notes that the threat actors using DarkSword targeted users in Malaysia, Saudi Arabia, Turkey, and Ukraine. DarkSword creates malware that uses JavaScript, and the attacker doesn’t need access to your device. Rather, a threat agent embeds the code within a website. When the user visits the website, the JavaScript executes and installs malware on the iPhone that can gather the user’s personal data, record aud