The iOS exploit toolkit DarkSword has caused cryptocurrency users a loss of 5.57 million USD, and Zhao Changpeng urges timely system updates
According to multiple security researchers and KOLs, the iOS exploit toolkit DarkSword poses a serious threat to cryptocurrency users. This exploit takes advantage of an underlying flaw in iOS 18, allowing users to simply open infected websites through Safari, enabling malicious code to run in the background of the phone without the need to connect a wallet or perform any signature authorization. Attackers can use this to steal passwords, photos, files, as well as private keys and mnemonic phrases from cryptocurrency wallets.
At least 18 malicious websites have been identified, resulting in victims losing up to 5.57 million dollars, involving more than 20 wallets. Zhao Changpeng commented on this, urging users to update their iOS systems, especially if they haven't updated for a while. He stated that no wallet software can update your operating system for you, and self-custody means self-responsibility.