WASHINGTON/KYIV, 18 March 2026 – Cybersecurity researchers have uncovered a powerful new spyware targeting Apple iPhones that could potentially compromise hundreds of millions of devices, highlighting growing risks in the global mobile security landscape.
The malware, dubbed “Darksword,” was discovered by researchers from Google, Lookout, and iVerify, marking the second major iPhone spyware discovery in recent weeks.
Mass-Scale Exploit via Compromised Websites
Researchers found the spyware embedded in dozens of websites, primarily in Ukraine, where it could infect iPhones simply by users visiting a malicious page, a technique known as a “watering hole” attack.
The malware targets devices running iOS versions 18.4 to 18.6.2, with Apple having already released patches for the vulnerabilities. However, a significant number of users remain exposed due to delayed software updates.
Estimates suggest that 220 million to 270 million iPhones globally may still be vulnerable, underscoring the scale of the threat.
Data Theft and Crypto Targeting
Once installed, the spyware is capable of:
- Stealing sensitive personal data
- Accessing communications
- Extracting cryptocurrency wallet information
Researchers believe the campaign is likely driven by financially motivated cybercriminals, rather than traditional state-sponsored actors.
Emerging Black Market for Spyware Tools
The discovery of Darksword, alongside another recent exploit called “Coruna”, points to a growing and concerning trend:
advanced cyber tools once reserved for governments are now circulating in criminal markets.
Experts warn that the increasing availability of such tools is lowering the barrier to entry for large-scale cyberattacks.
One researcher noted that the attackers appeared less concerned about their tools being exposed, suggesting a shift toward more aggressive, mass-targeting strategies.
A Shift in Cyber Threat Landscape
Historically, sophisticated iPhone spyware was used primarily in targeted espionage operations. However, the latest findings indicate a shift toward:
- Mass exploitation campaigns
- Financially driven cybercrime
- Wider distribution of advanced hacking tools
This evolution significantly increases the risk for everyday users, not just high-profile targets.
Apple’s Security Challenge
While Apple has issued fixes for the vulnerabilities exploited by Darksword, the incident highlights a key challenge in cybersecurity:
even the most secure ecosystems remain vulnerable if users delay updates.
Apple has not publicly commented on the latest findings, but the situation reinforces the importance of timely software updates and proactive device security.
Outlook: Cyber Risk Becomes Mainstream
For investors and the broader tech ecosystem, the development underscores a critical structural shift:
- Cybersecurity threats are becoming more scalable and commercialised
- Mobile devices are increasingly targeted as primary data hubs
- The cybersecurity industry is entering a phase of heightened demand and urgency
As digital infrastructure expands, the line between national security threats and everyday cybercrime continues to blur.
