Apple warns users of iPhone spyware and advises iOS updates
Spyware Alert
Apple urges users to update iPhones following discovery of Darksword malware, affecting older iOS versions and potentially compromising data for 220 to 270 million devices.
Apple released a special update for older iPhone models to combat Darksword and Coruna malware, reinforcing user security amid rising cyber threats.
Apple recently issued a special update targeting iPhone users with older devices to block the Darksword spyware and enhance security against hacking threats.
Briefing summary
Apple is urging users to update their iPhones due to newly discovered spyware, Darksword, affecting devices with older iOS versions. Cybersecurity researchers confirmed it targets hundreds of millions of users.
Research indicates that Darksword has been utilized mainly against specific groups, including Ukrainians, Chinese cryptocurrency users, and individuals across several countries. Analysts note a troubling rise in sophisticated hacking tools.
In response, Apple released a patch for older devices, reinforcing the importance of regular software updates. The latest iOS 26 also provides protection against hacking campaigns posed by this malware.
Full reading: Apple issues iPhone spyware alert and tells users to update iOS operating system | Science, Climate & Tech News
Apple is urging users to update their iPhones after the discovery of new spyware that can take over phones running older versions of the iOS operating system.
The powerful software exploit can steal information from potentially hundreds of millions of users, said cybersecurity researchers at Lookout, iVerify, and Alphabet’s Google.
It is unclear how many iPhones are vulnerable to the spyware known as Darksword, a type of malware designed to secretly steal information from mobile devices.
It affects users running an older version of the iOS operating system, released between March and August 2025 (versions 18.4 to 18.6.2).
An estimated 220 to 270 million iPhones still run on older iOS versions, according to researchers.
Analysis from the three companies shows the iPhone hacking tools have been focused on several groups: Ukrainians targeted by Russian intelligence; Chinese cryptocurrency users; and people in Saudi Arabia, Turkey and Malaysia.
On 3 March, Google and iVerify revealed details of a separate powerful iPhone spyware tool called Coruna, which was linked to Russian intelligence groups and Chinese cybercriminals.
Darksword was found on the same servers that suspected Russian operators of Coruna have used.
Researchers said the two hacking tools indicate a flourishing market for malware. Darksword can steal data, including emails, usernames, passwords, photos, and even cryptocurrency wallets.
Lookout described it as “highly sophisticated” malware, which “appears to be a professionally designed platform”.
An Apple spokesperson, Sarah O’Rourke, said the two tools only work against devices running older versions of Apple’s operating system, reinforcing the need for people to apply updates regularly.
“Keeping software up to date remains the single most important thing users can do to maintain the high security of their Apple devices,” she said.
Read more from US News:
Foreign Office has been hacked
Increase in teen cyber hackers
M&S cyber attack: Tech chief quits
John Scott-Railton, a senior researcher at Citizen Lab, a University of Toronto-sponsored cybersecurity lab, told NBC News: “The barrier to entry for widespread, devastating mobile attacks has been decisively lowered… it’s clear this problem is only going to grow.”
“The scary takeaway for regular users is they can’t spot this attack,” he added.
Apple’s latest operating system, iOS 26, was released in September and protects users against both hacking campaigns, according to the company.
Last week, Apple made the unusual move of releasing a special update for iPhone users with older devices that cannot handle a full upgrade to iOS 26, specifically to block hackers from using the hacking tools.