iPhone Tips: Red Alert for iPhone Users! Just One Click, and This Spyware Can Hack Your Phone..

Whether it is spyware or malware, even a minor oversight on your part can result in significant harm. Recently, a new iPhone spyware tool has come to light; if you make even a single click to visit a compromised website, this spyware can hack your device. According to security researchers, a toolkit named "DarkSword" was utilized in a campaign targeting individuals in Ukraine. This toolkit relies on a chain of exploits that allows attackers to infiltrate Safari, bypass its security layers, and steal data. This spyware specifically targets iPhones running on certain versions of iOS 18; however, Apple has since patched the vulnerabilities present in these iOS versions.

iPhone Spyware Poses a Threat
The Google Threat Intelligence Group (GTIG), in partnership with Lookout and iVerify, has identified a new iOS "full-chain exploit." This exploit leverages multiple zero-day (previously undiscovered) vulnerabilities to completely compromise a device. Specifically, a "full-chain exploit" refers to a toolkit that strings together several bugs in sequence to gain complete control over a phone via a web page.

In this particular instance, the attack begins within JavaScriptCore—the engine that Safari and WebKit use to execute website code. It first infects the GPU process and subsequently escalates its access to a higher-privilege iOS system service named "mediaplaybackd."

Finally, the exploit chain utilizes kernel-level vulnerabilities to further elevate its privileges and deploy the spyware payload. According to reports, DarkSword was designed to steal passwords, photos, browser history, and messages from apps such as WhatsApp and Telegram.

Disclaimer: This content has been sourced and edited from TV9. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.