Critical
threats
P7 DarkSword iOS variant steals keychain, wallets and Notes
iVerify found P7 DarkSword, a new variant of the DarkSword iPhone exploit kit, on a customer device in August 2026. It runs inside SpringBoard, extracts keychain data on the phone, steals wallet data, Photos and Notes, and polls for remote commands every 15 seconds. DarkSword targets iOS 18.4 to 18.7. All six chained CVEs are fixed and in CISA KEV.
