Apple has urged iPhone users to update to the latest iOS version following the discovery of a new hacking tool that allows data theft.
The tool, named DarkSword, poses a risk to millions of iPhones by silently infecting devices and extracting personal and financial information, according to Google Threat Intelligence Group (GTIG).
GTIG previously announced the discovery of Coruna, a separate set of hacking tools, earlier this month. Cybersecurity companies Lookout and iVerify have also issued warnings regarding DarkSword.
DarkSword does not require installation on a phone to infect it. Visiting an infected website can compromise a device, leading to the theft of passwords, iCloud content, and photos.
Lookout stated, “As opposed to many other previously reported cases of sophisticated attacks on mobile devices, DarkSword is not designed for ongoing surveillance.”
The company added, “Once it finishes collecting and exfiltrating the targeted data, it deletes the files it created on the filesystem of the device and exits. Its dwell time on the device is likely in the range of minutes.”
Google reported DarkSword can compromise iPhones running iOS versions 18.4 to 18.7. Apple advised, “If your iPhone doesn’t have the latest software, update iOS to protect your data.”
The company stated, “Security researchers recently identified web-based attacks that target out-of-date versions of iOS through malicious web content.” Apple confirmed users with iOS versions 15 through 26 are protected. A software update for iOS 15 and iOS 16 was released on March 11, 2026, to extend protection to older devices.
Devices unable to update beyond iOS 13 or iOS 14 will receive a “Critical Security Update” in the coming days. Apple also recommended enabling Lockdown Mode for enhanced security.
