P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity researchers have uncovered a new variant of the DarkSword iOS exploit kit, designated P7 DarkSword. This variant introduces several advanced capabilities compared to previously observed versions, including a reduced on-device footprint to evade detection. P7 DarkSword adds on-device keychain theft and crypto-wallet data exfiltration, targeting sensitive financial information stored on iOS devices. It also introduces two-way C2 (command-and-control) communication with attacker infrastructure, enabling remote command execution. The discovery was reported by iVerify in a newly published threat intelligence report. The malware represents a significant evolution in iOS-targeted exploit kits, combining stealth with expanded data theft and remote control capabilities.