Urgent iPhone Update: Protect Against Hacking Now
▼ Summary
– Apple is urging iPhone users to update their devices due to new hacking tools, named DarkSword and Coruna, that can remotely take over phones running outdated iOS versions.
– These exploit kits, detailed by Google and cybersecurity firms, grant hackers deep access to steal data like messages, location history, and passwords, primarily targeting Ukrainians, Chinese crypto users, and individuals in several other countries.
– Apple emphasizes that updating software is the most critical defense, as iOS 26 protects against these tools, and the company even issued a special update for older, incompatible devices.
– The tools infect phones via “watering hole” attacks on compromised websites and have complex origins, with Coruna being sold by a former defense contractor to Russian brokers before being used by state hackers and later Chinese cybercriminals.
– Security researchers warn that iPhone attacks are more pervasive than perceived, lowering the barrier for widespread mobile breaches and challenging the notion that iPhones alone are inherently safe.
Apple is urging all iPhone users to install the latest software updates immediately following the discovery of sophisticated hacking tools being used to remotely seize control of devices running outdated iOS versions. Cybersecurity firms have identified campaigns using exploit kits named DarkSword and Coruna, which grant attackers deep access to a phone’s contents, including messages, location history, and even health data. These tools underscore a critical reality: no device is inherently safe from compromise if its software is not current.
The threat is not theoretical. Research from Google, iVerify, and Lookout details how these kits have been actively deployed. DarkSword acts as a surveillance tool, vacuuming up a wide array of personal information from infected devices. An Apple spokesperson emphasized that regular software updates are the most crucial step any user can take to maintain device security, as these exploits specifically target older, unpatched iOS versions.
While Apple devices have a strong reputation for security, this news shatters the complacency that simply owning an iPhone is a sufficient shield. The campaigns have targeted specific groups, including Ukrainians by Russian intelligence and cryptocurrency users in China, but the risk extends far beyond. Experts warn that anyone with an outdated iPhone is potentially vulnerable, as these tools lower the barrier for widespread mobile attacks.
“The scary takeaway for regular users is they can’t spot this attack,” noted one senior researcher. The infections typically occur through a “watering hole” attack, where simply visiting a compromised website can silently infect a vulnerable phone. Apple has responded by releasing iOS 26, which protects against these threats, and even issued a special update for older devices that cannot run the latest full OS version.
The origin stories of these tools are telling. Coruna was originally developed by a U. S. defense contractor; a former executive pleaded guilty to selling it to a Russian broker. It was later used by Russian-linked hackers before being obtained by Chinese cybercriminals, who deployed it on fake financial websites to steal cryptocurrency—a prized target due to the difficulty of recovering stolen digital assets.
DarkSword’s origins are murkier, but its use has proliferated. Google reports that multiple commercial surveillance vendors and state-sponsored groups have now adopted variants of the tool, targeting individuals across several countries. This proliferation signals a dangerous shift in the cyber threat landscape for mobile devices.
The discovery challenges a long-held perception in the security community. As one expert put it, attacks on iPhones were often viewed as rare “mythical beasts.” The reality, however, is that such intrusions are likely more common than believed; they are just exceptionally difficult to detect without the right tools. This situation makes proactive defense—primarily through prompt software updates—non-negotiable for every user.
(Source: NBC News)
