Cybersecurity & Privacy — 2026-03-25
DarkSword iPhone Spyware Leak Threatens to Democratize Elite iOS Exploitation
A leak of DarkSword, an elite iPhone spyware tool targeting iOS 18, threatens to put state-grade mobile exploitation capabilities into the hands of less sophisticated actors. Security researchers warned the leak represents one of the most significant disclosures of commercial spyware tooling, with working exploit chains for recent iOS versions. The tools include capabilities similar to those used by Predator and Pegasus. An Israeli spyware maker separately announced plans to appeal its conviction in Greeces Predator case.
Analysis
DarkSword represents the fourth major commercial spyware leak in 18 months (after Predator, Candiru tooling, and the Paragon disclosure). Each leak lowers the barrier to entry for surveillance operations. The tools targeting iOS 18 are particularly concerning because Apple has not yet patched the specific exploit chain, meaning hundreds of millions of devices remain vulnerable until a fix ships.
DarkSword represents the fourth major commercial spyware leak in 18 months (after Predator, Candiru tooling, and the Paragon disclosure). Each leak lowers the barrier to entry for surveillance operations. The tools targeting iOS 18 are particularly concerning because Apple has not yet patched the specific exploit chain, meaning hundreds of millions of devices remain vulnerable until a fix ships.
1 sources
- Israeli spyware maker to appeal conviction in Greeces Predator case -
Times of Israel