SlowMist 预警 DarkSword 针对 iPhone 加密用户，已识别 1500 多个钓鱼站点
🚨 SlowMist TI Alert: DarkSword Targets iPhone Crypto Users ⚠️ iPhone and iPad users: Update your iOS promptly and beware of apps potentially compromised by #DarkSword. DarkSword targets crypto users, exploiting iOS vulnerabilities to escape the sandbox and steal sensitive data, including Keychain credentials, locally stored wallet private keys, and Notes data. Successful exploitation could put your crypto assets at risk. 🔎 According to SlowMist’s MistEye threat intelligence analysis, 1,500+ DarkSword-related phishing sites have been identified across the web, targeting users through e-commerce platforms, fake Binance and OKX sites, fake crypto wallets, gaming services, and cryptocurrency exchanges. 🛡️ Stay safe: • Keep your iOS devices updated. • Be cautious of suspicious or compromised apps. • Never store sensitive wallet credentials or seed phrases in Notes. 📖 Related SlowMist analyses: 🔗 DarkSword Trojan Backend & iOS Attack Chain: https://slowmist.medium.com/threat-intelligenc
SlowMist 发布威胁情报预警，称 DarkSword 利用 iOS 漏洞逃逸沙箱，窃取钥匙串凭证、本地钱包私钥和备忘录数据，威胁加密资产安全。据其 MistEye 威胁情报分析，全网已识别 1500 多个与 DarkSword 相关的钓鱼站点，通过电商平台、仿冒 Binance 和 OKX 站点、假钱包、游戏服务和交易所等渠道触达用户。
来源：SlowMist_Team · x.com