Crypto holders using older iPhones are being targeted by the DarkSword exploit kit, which deploys the Coruna malware to steal sensitive data. This malware exploits vulnerabilities in Apple’s WebKit and JavaScriptCore components to access vulnerable devices and drain funds from targeted wallets. Affected apps include Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, Uniswap, Bitpie, imToken and OKEx. The malware can also scan through photos and notes on infected devices to find BIP39 recovery phrases, allowing criminals to access funds even without device control. Apple has patched these vulnerabilities in iOS 26.3, but devices running iOS 26.2 and below remain potentially exposed.
Source: Read the original article

