iOS users are about to upgrade, this vulnerability is too severe

ME News Report, May 15 (UTC+8), SlowMist Yuán Céng social media announced that the high-risk iOS attack framework DarkSword has been publicly leaked on platforms like GitHub and is being used for large-scale theft attacks targeting cryptocurrency wallet holders. The attack program targets devices running iOS 18.4 to 18.7, exploiting Safari browser vulnerabilities through malicious web pages to achieve remote code execution, thereby stealing users' sensitive data. The attackers use bait web pages such as fake porn live streams, TRON energy stations, and refund processes to initiate attacks. iPhone users running older versions of iOS who visit such web pages with Safari browser (even if they do not close the page) may have their sensitive information, such as plaintext private keys and mnemonic phrases, maliciously accessed when unlocking their wallet app.