Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions of iOS with spyware, according to cybersecurity researchers.

TechCrunch (TC) is a leading technology news and media site that covers the latest trends, startups, and innovations in the tech industry. With breaking news,  analysis, and expert commentary, TechCrunch provides  insights into the world of technology and entrepreneurship. Developers can learn about emerging technologies, funding opportunities, and market trends by following TechCrunch's coverage of the tech industry.

TechCrunch

A newer version of the DarkSword iOS exploit kit has been publicly leaked on GitHub, enabling any hacker to target iPhones and iPads running iOS 18 or earlier without needing iOS expertise. The kit, originally linked to Russian government hackers targeting Ukrainians, consists of simple HTML and JavaScript files that can be deployed in hours. Security researchers from iVerify, Google, and Lookout confirm the exploits work out of the box and can exfiltrate contacts, messages, call history, and keychain data. With roughly one-quarter of Apple's 2.5 billion active devices still on iOS 18 or older, hundreds of millions of users are potentially at risk. Apple has issued an emergency patch and urges users to update immediately; Lockdown Mode also blocks these attacks.

Someone has publicly leaked an exploit kit that can hack millions of iPhones

Disrupt 2026: The tech ecosystem, all in one room

Save up to $300 or 30% to TechCrunch Founder Summit