A newer version of the DarkSword iOS exploit kit has been publicly leaked on GitHub, enabling any hacker to target iPhones and iPads running iOS 18 or earlier without needing iOS expertise. The kit, originally linked to Russian government hackers targeting Ukrainians, consists of simple HTML and JavaScript files that can be deployed in hours. Security researchers from iVerify, Google, and Lookout confirm the exploits work out of the box and can exfiltrate contacts, messages, call history, and keychain data. With roughly one-quarter of Apple's 2.5 billion active devices still on iOS 18 or older, hundreds of millions of users are potentially at risk. Apple has issued an emergency patch and urges users to update immediately; Lockdown Mode also blocks these attacks.