Lost coins on your iPhone—and you still have to click a link yourself to get hacked?

SlowMist published a report today exposing the backend of a Trojan called DarkSword. Its attack code first surfaced in March, a repository appeared on GitHub in July, and by the end of September, the whole operation was officially up and running. It’s an end-to-end setup: serve malicious webpages, install a Trojan, steal data from phones, then sweep up the funds in crypto wallets.

It claims to support iOS 13 and later, but a look at the code shows it can only target two version ranges: 18.6 to 18.7.2, and 26.0 to 26.1.

SlowMist’s advice is straightforward: update your operating system as soon as you can, and stay away from suspicious links. If you think you’ve been affected, stop using that phone for your wallet. Set up a new wallet on a clean device, move your funds, and revoke any approvals while you’re at it.

What version of iOS is your phone running? After reading the report, I went to check mine. Even a crypto sucker’s life matters.

#慢雾 #DarkSword #iOS安全 #WalletSecurity

—— Web3 crypto sucker Xiaokai
These are only my personal opinions and do not constitute investment advice.