CZ Urges iPhone Users to Update iOS Amid DarkSword Threat

Binance co-founder Changpeng Zhao (CZ) has urged iPhone customers to replace their working techniques amid warnings that the DarkSword exploit can steal crypto pockets info by compromised web sites.

The risk has raised issues about self-custody safety, particularly contemplating that the reported assault is claimed to find a way to goal delicate machine knowledge even with out victims connecting their wallets or approving transactions.

DarkSword Exploit Puts iPhone Crypto Wallets at Risk

In a November 6 put up on X, CZ told customers to set up the newest iOS updates, particularly those that haven’t up to date their gadgets shortly. Furthermore, he reminded crypto holders that pockets apps can not replace a telephone’s working system.

“No pockets software program can replace your OS,” he wrote. “Self-custody means self-responsibility.”

His warning got here within the wake of studies that DarkSword can exploit vulnerabilities on iOS by malicious web sites opened in Safari. Discussing the risk, a crypto person pointed out that an assault wouldn’t even want a pockets connection, transaction signature, or approval, with only a easy go to to an contaminated web site being sufficient to expose delicate info similar to pockets recordsdata and restoration phrases saved within the machine.

Officer’s Notes, a risk researcher, had earlier reported that about $5.57 million value of crypto had already been stolen by the vulnerability, with greater than 18 web sites allegedly concerned in distributing the malicious code.

According to the account, DarkSword was being sold on-line for $30,000, and the vendor has listed iOS 18.6.2 as the newest supported firmware. In addition, researchers have reportedly discovered placeholders for iOS 26 and 27, which may recommend that the infrastructure is being ready for potential exploits sooner or later.

However, Officer’s Notes identified that Apple had already patched all vulnerabilities, numbering six, that had been used within the recognized exploit chain. That stated, the wallet-targeting code continues to be related because the researcher says they found that components of the older model may nonetheless be reused, with one iteration that includes a devoted operate for the imToken pockets.

iOS Vulnerabilities Exposed Crypto Holders within the Past

There have been different iPhone safety incidents that resulted within the stealing of crypto, together with a vulnerability in Apple’s 2D rendering engine, CoreGraphics, which allowed malicious code to run when a particularly crafted file was processed. The telephone producer addressed the difficulty with the discharge of iOS 26.7.1 and iPadOS 26.7.1 towards the tip of September.

However, it did acknowledge that the flaw could have been exploited in extremely subtle assaults in opposition to particular individuals, with safety agency SlowMist on the time warning crypto customers to replace their gadgets and to keep away from suspicious hyperlinks and downloads.

There was additionally one other case that concerned the FomoPeek app, the place SlowMist and OKX safety reportedly discovered malicious code within the app that would exploit iOS weaknesses and entry delicate info past FomoPeek’s regular permissions.

The put up CZ Urges iPhone Users to Update iOS Amid DarkSword Threat appeared first on CryptoPotato.