Terrifying iPhone Exploit Threatens Crypto Holders

iPhone Hack Exposes Crypto Holders to Theft

Overview

Crypto holders with older iPhone devices may be in danger of having their crypto stolen, as a dangerous hacking kit is still targeting popular crypto wallets. The DarkSword exploit is still being used to deploy the Coruna malware to steal crucial data from crypto wallets, as per cybersecurity experts from Censys.

Vulnerability Analysis

The hacking kit exploits vulnerabilities in Apple's WebKit and JavaScriptCore components, which allows hackers to target vulnerable iPhone devices to access sensitive data. After hacking into the device, the Coruna malware can then focus on crypto wallets to try and steal information that can give hackers access to your funds.

Affected Wallet Apps

The affected crypto wallet apps include Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, Uniswap, Bitpie, imToken, and OKEx. The threat isn't limited to wallet apps. According to Censys, the malware can also scan through your photos and notes on infected devices to look for BIP39 recovery phrases.

Patch Availability

Apple has already fixed the vulnerabilities exploited by DarkSword. All known security vulnerabilities used by the hacking kit have already been patched in iOS 26.3, as per Macworld. However, older iPhone devices running iOS 26.2 and below (including older versions of iOS 18) could still be vulnerable to the attack, if they haven't been updated with the required security fixes.

Mitigation and Precautions

Crypto holders are being advised to ensure that their devices are up to date to minimise the risk of being targeted by these attacks. It is essential to regularly check for and install security updates, and to be cautious when using public Wi-Fi networks or accessing sensitive information on public devices.