A suspected group of Russian government hackers was caught targeting Ukrainians with new iPhone hacking tools designed for espionage and potentially to steal crypto.

TechCrunch (TC) is a leading technology news and media site that covers the latest trends, startups, and innovations in the tech industry. With breaking news,  analysis, and expert commentary, TechCrunch provides  insights into the world of technology and entrepreneurship. Developers can learn about emerging technologies, funding opportunities, and market trends by following TechCrunch's coverage of the tech industry.

TechCrunch

Cybersecurity researchers at Google, iVerify, and Lookout uncovered a new iPhone hacking toolkit called Darksword, attributed to a suspected Russian government-linked group (UNC6353) targeting Ukrainian users. The toolkit was designed to steal passwords, photos, messages, browser history, and potentially cryptocurrency from wallet apps, then quickly disappear from devices — with dwell time measured in minutes. Darksword is linked to an earlier toolkit called Coruna, originally developed by U.S. defense contractor L3Harris. The campaign targeted anyone visiting certain Ukrainian websites from within Ukraine, suggesting broad rather than targeted surveillance. Researchers debate whether the crypto-theft capability indicates financial motivation or expansion of Russian state-aligned activity into financial theft.

Russians caught stealing personal data from Ukrainians with new advanced iPhone hacking tools