Millions of iPhones vulnerable to a new DarkSword hack: Here’s what you should do

Apple iPhones running iOS 18.4 to iOS 18.6.2 are vulnerable to a new cyberattack. Called ‘DarkSword’ and originating from Russia, it is reportedly targeted towards iPhone users in Ukraine.

It can hack and steal personal data from the device according to Google, Lookout and iVerify. Almost 25 per cent of iPhones are running on older version of iOS that’s susceptible to the attack. 

Older iPhones at risk

Cybersecurity firms analysed the malware, and Google’s investigation traced DarkSword back to November 2025. The exploit works when the user visits a compromised website. It can allow attackers to silently take control of their devices without any user interaction.

Information such as Wi-Fi passwords, text messages, call history, root location history, browser history, and even crypto currency wallets can be extracted as a part of this attack. Evidence of the attack can be erased within a few minutes. 

Security firms uncovered that DarkSword is hosted on the same server as Coruna from earlier this month. The latest attack is suspected to be carried out by the same Russian hacking group UNC6353. 

ALSO READ: AirPods Max 2 vs AirPods Max: What’s different

Google recommends iPhone users to update their devices to the latest iOS 26. Apple has also fixed the issues saying that phones running iOS 18.7.3 and above are no longer at risk. The Cupertino-based tech giant has also released a special emergency update for older iPhones that can’t be updated to the latest software version. Apple’s Lockdown mode also thwarts DarkSword attack. 

It’s also recommended to avoid any suspicious links to stay protected as threats continue to evolve.

Stay tuned to Unboxed by Croma for more tech updates.