The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Google Cloud Blog

The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat...

DarkSword is a new iOS exploit chain that leverages multiple zero-day vulnerabilities to fully compromise iOS devices.

https://xcancel.com/ryanaraine/status/2034338701430661352#m

Tweet:

Two full iOS exploit kits in one month, deployed via watering holes on public websites, potentially affecting hundreds of millions of devices. Will Apple acknowledge that this no longer fits the “very small number of highly targeted individuals” narrative?

Other info:

DarkSword supports iOS versions 18.4 through 18.7

This suggests that UNC6748 didn’t have an exploit chain for Chrome at the time of this activity.