DarkSword Exploit Puts Older iPhones at Risk
Google reports the iOS chain can fully control iPhones on iOS 18.4 through 18.7, with fixes in iOS 26.3.
Updated on Nov. 5, 2026 in Cybersecurity
Live Poll
Have you updated your iPhone to the latest iOS version this week?
Google's Threat Intelligence team detailed DarkSword, an iOS exploit chain reportedly able to take full control of iPhones running iOS 18.4 through iOS 18.7 via a booby-trapped website. The vulnerabilities have been addressed in iOS 26.3 and later. The development is documented security research, not an announced product.
Why it matters
DarkSword has been used in targeted attacks by spyware vendors and suspected state hackers, and an associated spyware tool reportedly targets cryptocurrency wallet data, keychains, messages, and passwords. Because crypto holders routinely access wallet services from phones, mobile device security is becoming a direct financial concern.
The disclosure identifies a specific affected range of iOS 18.4 through iOS 18.7, with the vulnerabilities addressed in iOS 26.3 and later. Public detail on the exact number of affected devices or attacks is not available from the reported findings.
The players
Google Threat Intelligence
Google's security research team that detailed the DarkSword exploit chain and warned other attackers may be using it.
Binance
The major cryptocurrency exchange that resumed withdrawals in phases, including SHIB on the Ethereum network, and warned of opportunistic scammers.
Mazrael
A Shiba Inu community member who shared the security reminder about the DarkSword iOS exploit.
The details
DarkSword is an exploit chain, meaning a sequence of software flaws linked together so an attacker can progressively gain control of a device. In the reported attack path, a user visits a booby-trapped website, which triggers the chain on an unpatched iPhone. The associated spyware reportedly then reaches cryptocurrency wallet data, device keychains (the system's encrypted store of passwords and access credentials), messages, photos, and passwords.
Timeline
November 5, 2026: Mazrael posted the iPhone security reminder on X.
The Tech Race
The DarkSword disclosure sits in an ongoing contest between mobile platform security teams and commercial spyware vendors and state hackers. Its documented use by those actors shows that high-capability iOS exploit chains are being deployed in targeted attacks, not only in research.
iPhone owners on iOS 18.4 through iOS 18.7 are exposed to the reported website-based attack until they update to iOS 26.3 or later. Crypto holders who manage wallets from a phone should update, and if compromise is suspected, the reminder recommends creating a new wallet on a clean, updated device and transferring funds.
The takeaway
Update iPhones to iOS 26.3 or later now if you run iOS 18.4 through 18.7. Watch for further Google Threat Intelligence updates on DarkSword, and be wary of phased Binance withdrawal scams, since Binance says it will never contact users first about their funds.
Further reading
For broader context on threats like this, explore our Cybersecurity coverage.
Source note: This article includes information reported by U.
Live Poll
Have you updated your iPhone to the latest iOS version this week?
