P7 DarkSword iOS Exploit Kit Gains Wallet Theft and Two-Way C2

Researchers have detailed a new DarkSword iOS exploit kit variant known as P7 DarkSword. The updated tool reportedly reduces its footprint on the device while adding keychain and cryptocurrency wallet theft, along with two-way command-and-control communications. iVerify published the findings in a report.
P7 DarkSword is described as a new variant of an iOS exploit kit. According to iVerify’s report, researchers say it reduces its footprint on the device while adding capabilities to steal keychain data and cryptocurrency wallets. The updated tool also reportedly supports two-way command-and-control communications. The findings place it within the broader category of mobile exploit kits, which security researchers track because they can bundle multiple intrusion and data-theft functions into a single tool. The report’s details are limited to these reported changes and the source that published them.
The reported capabilities could raise concerns for iPhone users who store credentials or cryptocurrency wallets on their devices. If such an exploit kit were used in real-world attacks, affected individuals might face unauthorized access to sensitive accounts or digital assets. Security teams and wallet providers may need to monitor for related indicators and advise users on device updates and account protections. The broader impact may depend on how widely the tool is deployed and how effectively existing defenses detect it.