← All issues

Government-Backed Hacking Tool Used Against Civilian iPhones

Originally sent April 3, 2026

TLDR: A dangerous iPhone exploit called DarkSword can steal data without any user action and has spread beyond nation-state actors. Apple is rolling out fixes, so update your devices immediately. Also, major updates for Windows, Edge, and Chrome patch dozens of serious vulnerabilities, including actively exploited zero-days.

Patch Radar

• Windows and Edge: Microsoft patched 84 vulnerabilities, including 8 critical flaws that could allow serious system compromise.
• Chrome: Google fixed multiple zero-day vulnerabilities that were actively exploited. These flaws could allow attackers to create malicious websites that run code on your device.

DarkSword iPhone Exploit Used in the Wild

A powerful exploit toolkit called DarkSword, once mainly used by nation-state hackers and surveillance firms, has now been seen in broader attacks by smaller, financially-motivated threat groups.

This exploit targets iPhones running iOS 18.4 through 18.7 and works as a zero-click attack, meaning it can compromise a device without the user tapping or installing anything.

Once triggered, DarkSword can extract personal data, credentials, and other sensitive information within seconds or minutes. After collecting the data, it removes itself, making it difficult to detect.

This shift from elite use to wider adoption is especially concerning. Tools that were once rare are becoming more accessible, increasing the risk to everyday users.

What to Know

• DarkSword is a zero-click exploit, requiring no action from the user.
• It targets iPhones running the older iOS 18.4–18.7.
• The exploit can quickly steal sensitive data and then delete itself.
• Previously limited to advanced attackers, it’s now being used more widely to commit theft and fraud.
• Apple is actively pushing updates to fix the issue.

What to Do Now

• Update your iPhone immediately when a new iOS version becomes available.
• Avoid visiting untrusted or suspicious websites, as these may trigger exploits.
• Keep automatic updates enabled so you don’t miss critical patches.
• If your device is outdated and no longer receives updates, consider upgrading.

BleepingComputer - “Apple Expands iOS 18 Updates… to Block DarkSword”
TheHackerNews - “DarkSword iOS Exploit Kit Uses… 3 Zero Days…”

When high-end hacking tools start spreading beyond their original users, the risk shifts from targeted attacks to broader exposure. Staying updated is one of the easiest and most effective ways to stay protected against threats you may never even see.

Stay safe,
Jaiden