Wow, iOS has also fallen.

ME News alert: On May 15 (UTC+8), SlowMist YuXian said on social media that the high-risk iOS attack framework DarkSword has been publicly leaked on channels such as GitHub and is being used for large-scale theft attacks targeting holders of cryptocurrency wallets. The attack targets devices running iOS 18.4 to 18.7. It achieves remote code execution by exploiting vulnerabilities in the Safari browser through malicious web pages, thereby stealing users’ sensitive data. Attackers launch the attacks using bait pages such as fake porn live streams, TRON energy stations, and refund-flow pages. If iPhone users running older versions of iOS visit such pages with the Safari browser (even if they do not close the page), sensitive information such as plaintext private keys and mnemonic phrases may be maliciously accessed when they later unlock the wallet app(s).