Google's research details three different groups abusing this attack chain, but also notes that "it is likely that other commercial surveillance vendors or threat actors may also be using DarkSword." A threat cluster it tracks as UNC6748, using a Snapchat-themed website, snapshare[.]chat, has been using DarkSword to target Saudi Arabian users "multiple times throughout November 2025," the threat intel team wrote. These attacks ultimately deployed GhostKnife, a JavaScript-based backdoor with modules for stealing different types of data, including signed-in accounts, messages, browser data, loca
Snoops plant info-stealing malware on iPhones, Google warns… Connor Byrne, 21, adopts the uncommon but security-minded approach to iPhone passcodes, using an alphanumeric string instead of the standard four-number passcode. He updated his iPhone 13 from iOS 18 to iOS 26.4 on April 5, but in doing so lost the ability to enter his passcode. …
Personal Tech Locked-out iPhone user tells The Reg that Apple is scrambling to fix character flaw passcode bug University student says he plans to move to Android, but concedes iOS engineers acting fast Apple is finally working on a fix for a bug that has locked some users out of their iPhones for … …
Research State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns Darksword is the second iOS exploit chain in a month A new exploit kit targeting iPhone users and stealing their sensitive data is being abused by "multiple" spyware vendors and suspected nation-state … …
… MORE CONTEXT Apple signs meaningless deal to make some less-important parts in America Apple iOS 26 set to dump 75M iPhones on the e-waste pile Apple's 'Awe Droppings' fall close to the tree Apple's ultra-thin iPhone flops as foldable iPad hits a crease Software support timelines are another way th… …