SlowMist Warns DarkSword Can Steal Wallet Keys From iPhones and iPads

SlowMist's Cosine warned iPhone and iPad users to update iOS immediately, saying DarkSword malware may have infected some apps already on their devices and can steal locally stored cryptocurrency wallet data.

The trojan targets iPhone cryptocurrency users. Its operators use iOS vulnerabilities to break out of an app sandbox, the restricted environment that limits an app's access to other information on a device. This escape gives attackers a path to data beyond the app itself.

That data can include passwords and other personal information kept in Keychain, local files holding wallet private keys, and notes. These are sensitive materials the warning says the trojan can take from an affected device. The attack is directed at cryptocurrency users, with stealing their crypto as its stated objective.

The warning covers iPads as well as iPhones and specifically flags apps that have already been installed as potentially infected. It urges users of both device types to update iOS immediately.