Security

Alert: iOS 18 Vulnerable to Hackers Through Infected Links

Published

10 hours ago

March 18, 2026

PSA: Hackers can raid iOS 18 with an infected link

Update Your iOS Now to Protect Your Personal Information

If you have been delaying updating your iOS to version 26, it’s time to take action. Recent findings by security researchers have revealed a new hacking tool known as “DarkSword” that specifically targets iPhones running iOS versions 18.4 to 18.6.2, as reported by Wired. This exploit allows malicious actors to gather personal data from iPhones that visit malicious websites and has already been utilized by Russian hackers.

The Threat and Impact of DarkSword

The Google Threat Intelligence Group, in collaboration with cybersecurity firms Lookout and iVerify, conducted an analysis of the DarkSword attack. It is estimated that up to 270 million devices are still running the vulnerable iOS versions. When a user accesses a compromised website, DarkSword exploits “six different vulnerabilities” to target Safari, enabling bad actors to access a wide range of sensitive information including text messages, contacts, credentials, iCloud files, photos, cryptocurrency wallets, call logs, location history, and more.

Response and Mitigation Efforts

Google reported the vulnerability to Apple in late 2025. Apple, in turn, confirmed that they had patched all underlying vulnerabilities in iOS the previous year and issued an emergency software update for older devices that could not update to newer iOS versions.

Characteristics of DarkSword

DarkSword is designed as a “hit-and-run” attack, allowing attackers to extract valuable data and evade traditional detection methods swiftly. The attack targeted users in Ukraine, Saudi Arabia, Malaysia, and Turkey, with suspected Russian state-sponsored hackers utilizing the exploit. Additionally, these hackers were found using an iOS exploit kit named Coruna. The unobfuscated nature of the DarkSword code makes it easily accessible to other malicious actors for potential redeployment.

Protection Measures and Recommendations

Lockdown Mode, an extreme security feature for iPhones, protects users such as journalists, activists, and politicians from targeted attacks and remains unaffected by the DarkSword exploit. Both Apple and Google have taken steps to block the malicious links used in DarkSword attacks in Safari and Chrome. It is emphasized that keeping software up to date is crucial for maintaining the security of Apple devices, as updates include the latest security fixes and protections.