DarkSword, a new iPhone hacking technique, has been discovered in use by Russian hackers targeting vulnerable iOS devices. The fileless exploit works against iOS 18, the previous operating system version that still powers nearly a quarter of iPhones worldwide. Unlike traditional spyware, it hijacks legitimate processes to steal passwords, photos, app data, and cryptocurrency wallet credentials without leaving persistent traces.

The technique has been embedded in infected websites, allowing hackers to compromise iPhones simply by visiting compromised sites. Researchers found the code left unobscured and fully documented, making it easy for other hacking groups to reuse. DarkSword represents a significant escalation from previous targeted attacks to indiscriminate mass hacking campaigns.

While Apple has released security updates to patch the vulnerabilities, many users remain vulnerable if they haven't updated to iOS 26. The tool's discovery follows another sophisticated hacking toolkit called Coruna, with both now appearing in the wild after likely being sold by broker firms that buy and sell zero-day exploits. Users who haven't updated their devices are at immediate risk of having their personal data harvested.