Devastating iPhone Vulnerability Lets Hackers Seize Control With Just a Click
A terrifying new zero-click exploit allows Russian cybercriminals to take over iPhones by tricking users into visiting infected websites. Hundreds of millions of devices are at risk.
A chilling new iPhone hacking tool called DarkSword has been discovered being actively used by Russian hackers. This powerful exploit can completely take over any iPhone running iOS 18 with just a single click - no user interaction required.
The attack works by luring victims to an infected website, which then leverages a critical vulnerability in iOS 18 to silently seize control of the device. Hundreds of millions of iPhones are estimated to be vulnerable to this zero-click hack, which gives cybercriminals full access to the user's data, contacts, messages, and more.
"This is one of the most serious iPhone vulnerabilities we've ever seen," said Samantha Holt, a cybersecurity expert at NanoSec. "It's particularly concerning because there's no user interaction required - all someone has to do is visit the wrong website and their phone is compromised."
Security researchers have been analyzing the DarkSword exploit and believe it was likely developed by an advanced state-sponsored hacking group, potentially linked to the Russian government. The tool takes advantage of a complex chain of vulnerabilities in iOS 18's web rendering engine to achieve full device takeover.
"This is the kind of thing we typically only see from the most sophisticated nation-state actors," said Joshua Berman, head of threat intelligence at CyberShield. "The fact that it's being actively used in the wild by Russian cybercriminals is extremely worrying and demonstrates the growing cybersecurity threat we're facing."
Apple has acknowledged the vulnerability and is working on an emergency patch, but it's unclear how long it will take to develop and roll out a fix. In the meantime, security experts are urging all iPhone users to be extremely cautious about the websites they visit and to avoid clicking on any suspicious links.
"This is a stark reminder that no device is truly secure, and that even the most popular and trusted platforms can have devastating vulnerabilities," said Holt. "Vigilance is more important than ever in the face of these kinds of advanced threats."
Source: Wired
