SlowMist Flags "Darksword" Exploit Allegedly Targeting iOS 26.5 to Steal Wallet Private Keys

Odaily Planet Daily reported that 23pds, chief information security officer at blockchain security firm SlowMist, warned attackers are exploiting the "Darksword" vulnerability to bypass iOS protections through Safari, seize control of devices, and extract private keys and other sensitive data from self-custodial crypto wallets. According to 23pds, the vulnerability has previously been leveraged in campaigns targeting users in Saudi Arabia, Turkey, Malaysia and Ukraine. Google's Threat Intelligence Group has said Darksword originally affected iOS versions 18.4 through 18.7. 23pds said the exploit has since been adapted to iOS 26.5, though the claim has not been officially verified. SlowMist said attacks often start with social engineering: victims click malicious links delivered through social media or messaging apps, after which attackers may obtain root-level access and steal wallet data. Users are advised to update their mobile operating systems as soon as possible and avoid visiting links sent by unknown parties. Separately, Bitcoin.com News reported that three investors lost nearly $1.8 million worth of Bitcoin after downloading counterfeit wallet apps from Apple's App Store and have filed a lawsuit against Apple.