Apple has issued an urgent alert urging millions of iPhone users to update their devices after cybersecurity experts uncovered a potent new spyware strain capable of hijacking phones running outdated iOS software. This alarming discovery exposes a vast number of users to data theft, marking a significant escalation in mobile device cyberattacks.
What Happened: The Discovery of Darksword Spyware
Security researchers from Lookout, iVerify, and Google have identified a sophisticated spyware tool named Darksword, designed to infiltrate iPhones running older versions of Apple’s operating system. This malware operates stealthily, extracting sensitive personal data such as emails, usernames, passwords, photos, and even cryptocurrency wallets without the user’s knowledge.
Darksword specifically targets iPhones operating on iOS versions released between March and August 2025—namely versions 18.4 to 18.6.2. Current estimates suggest that between 220 and 270 million iPhones globally still use these outdated systems, placing a staggering number of users at risk.
Researchers have linked Darksword with espionage campaigns targeting multiple groups worldwide. Notably, Ukrainian citizens have been singled out, believed to be the focus of Russian intelligence efforts. Additionally, Chinese cryptocurrency users, as well as individuals in Saudi Arabia, Turkey, and Malaysia, appear to be targeted by this malware.
Connections and Context: Linking Darksword to Broader Cyber Threats
In early March, cybersecurity firms disclosed another formidable iPhone spyware called Coruna. This tool, associated with Russian intelligence and Chinese cybercriminal networks, shares server infrastructure with Darksword, indicating possible coordination or common actors behind these hacking operations.
Experts describe both Darksword and Coruna as indicators of a thriving underground market for advanced mobile malware. Lookout characterized Darksword as a “highly sophisticated” and “professionally designed platform,” underscoring the increasing complexity and danger of these cyber threats.
John Scott-Railton, a senior researcher at the University of Toronto’s Citizen Lab, emphasized the chilling implications for everyday users. Speaking to NBC News, he explained that the threshold for launching devastating mobile attacks has dramatically lowered, and the average user remains virtually powerless to detect these intrusions. “The scary takeaway is they can’t spot this attack,” Scott-Railton warned.
Apple’s Response: Urging Updates and Enhanced Security Measures
Apple’s spokesperson, Sarah O’Rourke, stressed that both Darksword and Coruna exploit vulnerabilities present only in older iOS versions. This highlights the critical importance of timely software updates to maintain device security. “Keeping software up to date remains the single most important thing users can do to maintain the high security of their Apple devices,” she affirmed.
Apple released its latest operating system, iOS 26, in September, which includes protections against these spyware attacks. For users with older iPhones incapable of running iOS 26, Apple took the rare step of issuing a targeted security patch last week. This special update aims to block these hacking tools and safeguard devices that otherwise would remain vulnerable.
These actions reflect Apple’s commitment to bolstering security across their product ecosystem amid rising cyber threats targeting mobile platforms worldwide.
Why This Matters: The Growing Threat Landscape for Mobile Users
The emergence of Darksword and Coruna illustrates a troubling trend: cybercriminals and state-sponsored hackers are increasingly focusing on mobile devices as lucrative attack vectors. Smartphones contain vast troves of personal and financial data, making them prime targets for espionage, theft, and surveillance.
With hundreds of millions of devices still running outdated software, the risk window remains wide open for exploitation. The global scope of these attacks—from Eastern Europe to Asia and the Middle East—demonstrates the geopolitical dimensions of modern cyber warfare.
For everyday users, this means vigilance is essential. Regularly updating iPhones to the latest iOS version is the most effective defense against these sophisticated spyware threats. Ignoring updates leaves users exposed to invisible attacks capable of compromising their digital lives.
Looking Ahead: Staying Secure in an Evolving Cyber Environment
As spyware tools grow more advanced and accessible, the cybersecurity landscape will continue to evolve rapidly. Apple’s proactive updates and patches set a strong example, yet users must take personal responsibility for device security.
Understanding that invisible threats like Darksword exist underscores the importance of maintaining good digital hygiene—installing updates promptly, using strong passwords, and monitoring for suspicious activity.
Ultimately, the battle against spyware highlights a broader imperative: staying informed and prepared in an era where mobile security is paramount. Apple’s warning serves as a critical reminder that the most effective defense begins with keeping software current.
