The previous iOS exploit required you to install an app from an unknown source before you could get hit.
This one doesn’t.

DarkSword was disclosed by Google’s Threat Intelligence Group on March 18. It chains together 6 vulnerabilities, 3 of them zero-days.
Devices running iOS 18.4 through 18.7 are in its sights.
There’s only one trigger: opening a compromised webpage in Safari.
No tapping, installing, or signing required—your seed phrase and transaction data are taken directly.

This is no longer just theoretical.
On-chain records just dug up by Bitquery show that from October 5 to November 4, 365 wallets were drained, at least $4.06 million in USDT was transferred, and there were 43 receiving addresses.
Censys matched 18 wallet apps to the affected wallets, including MetaMask, Phantom, Trust Wallet, and Coinbase.
This also affects people on the $BNB chain: the apps above are all major wallets commonly used to connect to BSC.

Binance Wallet also issued a warning. It said just one thing: upgrade immediately.
Don’t stay on 18.4 through 18.7—upgrade to the latest version.
If you really can’t upgrade, turn on Lockdown Mode for now, and stop opening links from unknown sources in Safari.

I just checked mine and upgraded. You should check yours too—it takes 30 seconds.

#DarkSword