Someone Has Publicly Leaked an Exploit Kit That Can Hack Millions of iPhones

The recent release of an exploit kit has raised major concern across the cybersecurity landscape, with reports suggesting it may already be targeting millions of iPhones. Known as the “DarkSword” exploit kit, it was previously used in advanced, targeted attacks—but now that it’s publicly available, many more attackers can use it, increasing the risk significantly.

What Was Released?

The exploit kit reportedly includes multiple tools that target several vulnerabilities in Apple’s iOS. Previously, well-funded groups used these vulnerabilities in highly sophisticated attacks. Due to the public disclosure of these vulnerabilities, there is now an opportunity for less sophisticated attackers to also take advantage of these vulnerabilities that also existed within Apple’s operating systems.

This is a significant drop in the barriers to entry into cybercrime for any attackers looking to make larger-scale attacks against a wide variety of targets in larger sets of data.

How Does the Exploit Work?

The exploit kit is presumed to rely on either sending a user a malicious link or directing them to a malicious website. After a person interacts with either of those two types of content, the attacker may gain unauthorised access to sensitive data stored on the victim’s device.

The potential risks associated with the use of this exploit could include:

The ability of an attacker to access the user’s text messages and emails

• The ability of an attacker to steal data (including stored credentials)
• The ability of an attacker to track the user’s  activity and where they travel

The technical details of how this exploit works are not necessarily simple; however, the major issue to be concerned about regarding this exploit is related to exploiting unpatched software vulnerabilities.

Which Users Are Most At-Risk?

Among iPhone users, those with an older version of iOS (iPhone software) may be most vulnerable to malware or exploitation. Apple has already provided security updates for several existing known vulnerabilities.

Because many iPhone devices don’t receive regular software updates from Apple, a large number of users remain exposed to potential exploitation.

What Is The Issue?

Previously, exploit kits were available to only government actors or specialised groups. Now that these exploit kits are publicly available, more people can use them, increasing the risk for iPhone users. This mirrors past cyber incidents where leaked tools led to widespread exploitation across the internet.

How Can I Protect Myself?

There are three simple steps to help iPhone users reduce the risk of being exploited:

• Update your iPhone operating system to the most recent version available.
• Don’t click on any link from anyone that you don’t know or that seems suspicious.
• Only install applications from reputable sources.
• Enable any and all security features in the iPhone that you can.

Keeping your iPhone operating system up-to-date is your best defence against these types of known vulnerabilities.

Concluding Thoughts:

The leak of this exploit kit shows how increasing complexity in mobile security has created new challenges. And while iPhones do have a reputation for being secure devices, nothing is immune to potential weaknesses.

The majority of end users can stay safe by generally sticking to good practices around updating and managing their accounts, but incidents like this also remind us that, as our technological advances continue to grow, the potential issues are still evolving along with them.