P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity researchers have uncovered a new variant of the DarkSword iOS exploit kit, designated P7 DarkSword. This variant reduces its on-device footprint compared to previously observed versions. P7 DarkSword adds new capabilities including on-device keychain theft and crypto wallet data exfiltration. It also introduces two-way C2 (command and control) communication with attacker infrastructure. The discovery was reported by iVerify in a newly published report. The addition of remote command capabilities marks a significant evolution in the kit's functionality. The targeting of iOS devices and cryptocurrency wallets suggests financially motivated threat actors. This variant represents an escalation in mobile-focused exploit tooling.