<![CDATA[P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands]]>Cybersecurity researchers at iVerify have disclosed a previously unseen variant of the DarkSword iOS exploit kit, tracked as P7 DarkSword. The findings were published in a new report on Thursday.

Compared to the DarkSword variants typically observed in the wild, this iteration makes notable changes to both its stealth and its data-stealing capabilities. The P7 DarkSword variant:

  • Reduces its on-device footprint, making it harder to detect
  • Adds on-device theft of keychain data and crypto-wallet credentials
  • Introduces two-way C2 (command-and-control) communication with the attacker's infrastructure

The addition of two-way C2 is a significant shift, as it allows the operator to issue remote commands to compromised devices rather than simply exfiltrating data one way. The inclusion of keychain and crypto-wallet targeting also points to a focus on high-value credentials and digital assets.

At this time, no specific CVE identifiers, affected iOS versions, or indicators of compromise have been provided in the available reporting.

Source: The Hacker News

Does your organization have detection or hardening measures in place for iOS keychain and crypto-wallet data on managed devices?

]]>https://xploitlk.com/topic/633/p7-darksword-ios-exploit-kit-adds-crypto-wallet-data-theft-and-remote-commandsRSS for NodeTue, 27 Oct 2026 09:28:44 GMTSat, 10 Oct 2026 06:30:22 GMT60