$5.57 Million in Losses, Over 20 Wallets Affected: DarkSword Has Identified at Least 18 Malicious Websites

Odaily Report: According to monitoring by multiple security researchers and KOLs, the iOS exploit kit DarkSword exploits underlying vulnerabilities in iOS 18. After users open infected websites through Safari, malicious code can run in the phone's background without the need to connect a wallet or perform signature authorization. Attackers can use this to steal passwords, photos, files, as well as crypto wallet private keys and seed phrases. At least 18 malicious websites have been identified so far, with victim losses amounting to $5.57 million, involving more than 20 wallets. Changpeng Zhao called on users to promptly update their iOS systems, especially those who have not updated in a long time. He stated that no wallet software can update the operating system on behalf of users, and that self-custody means users must take responsibility for themselves.