Learn about the Darksword exploit toolkit targeting iPhones in 2026, affecting iOS 18.4-18.6.2. Discover risks, affected regions, and how updates protect devices.
© RusPhotoBank
In early 2026, cybersecurity experts detected a significant surge in threats targeting iPhones. Following Coruna, a new malicious exploit toolkit called Darksword emerged, capable of attacking hundreds of millions of devices. It affects iPhones running iOS versions 18.4 through 18.6.2, meaning the threat isn't limited to older phones but extends to modern gadgets that many users habitually fail to update.
Darksword spreads through dangerous links, messages, and even from friends already infected with the software. Researchers have identified campaigns in Saudi Arabia, Turkey, Malaysia, and Ukraine. Users in the U.S. with the latest iOS versions remain relatively protected, but experts urge not to ignore the threat.
Apple has emphasized that updates remain the primary defense tool. Many vulnerabilities exploited by Darksword have already been patched in newer system versions, and Safari's Safe Browsing feature blocks access to malicious domains. However, around 270 million iPhones are still running "vulnerable" iOS versions, making them an attractive target.
The appearance of Darksword and Coruna serves as a warning to iPhone owners that neglecting updates is risky. Even modern devices can become targets if users ignore basic security measures.