iVerify found P7 DarkSword can scan for crypto wallet apps and extract imToken data from already compromised iPhones. It can also collect passwords, Apple Notes, photos and app files.
The default 15-second cycle polls for attacker commands, rather than guaranteeing wallet extraction at that interval. Researchers confirmed neither completed crypto theft nor a bypass of the latest iOS patches.
Newer versions of three AI model families caught fewer fraudulent payments and less fraud value in Coinbase’s historical replay of 16,140 transactions under an unchanged decision policy.
The test does not establish live customer losses or explain the regressions. It shows why payment providers need to test upgrades in their actual screening setup rather than assume a newer model performs better.