Live Feeds
● LIVE Updated 1h ago · 12 sources tracked

Hackers Are Serving Malware To iPhones Via Hundreds Of Infected Websites

Hackers are exploiting hundreds of infected websites, malicious advertisements, and abandoned domains to deliver spyware to iPhones without requiring clicks, downloads, or warnings. Security experts at iVerify and Report URI revealed that the scheme can compromise users simply by scrolling past an ad or visiting legitimate web pages. The campaign targets outdated, vulnerable iOS systems to steal passwords, photos, and cryptocurrency wallet private keys. SlowMist issued warnings regarding the DarkSword malware variant targeting crypto assets, while cybersecurity advisories emphasize that keeping software updated is vital for prevention.

🎙️

Listen to Live Briefing

Real-time synthesized voice briefing · Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (12)
⚡ Key Developments & Real-Time Context
Text size:
  • ✓ Hackers are serving malware to iPhones via hundreds of infected websites and malicious advertisements.
  • ✓ The spyware can infect iPhones without requiring user clicks, downloads, or installation.
  • ✓ Experts at iVerify and Report URI revealed cyberattacks operating through ads and expired domains without user action.
  • ✓ The exploits target iPhone users whose software has not been updated and remains vulnerable.
🛡️ Source Corroboration: 12 independent reporting domains (100% confidence) ⏱ Read time: ~2 min

What changed

Security researchers uncovered a widespread scheme involving malicious ads and abandoned domains delivering spyware to iPhones without user interaction.

Live updates

  1. Hackers Serve Spyware To iPhones Via Infected Web Ads

    Hackers are exploiting hundreds of infected websites, malicious advertisements, and abandoned domains to deliver spyware to iPhones without requiring clicks, downloads, or warnings. Security experts at iVerify and Report URI revealed that the scheme can compromise users simply by scrolling past an ad or visiting legitimate web pages. The campaign targets outdated, vulnerable iOS systems to steal passwords, photos, and cryptocurrency wallet private keys. SlowMist issued warnings regarding the DarkSword malware variant targeting crypto assets, while cybersecurity advisories emphasize that keeping software updated is vital for prevention.

    Why it matters

    Malicious actors are increasingly turning standard web browsing and digital advertising into automated spyware traps. By hijacking expired analytics tags and compromised websites, attackers can compromise user devices silently in the background without standard user interaction triggers like clicking a link. This campaign poses severe risks to personal privacy and digital assets, notably targeting cryptocurrency users to drain wallet funds.

    What is confirmed

    • Hackers are serving malware to iPhones via hundreds of infected websites and malicious advertisements.
    • The spyware can infect iPhones without requiring user clicks, downloads, or installation.
    • Experts at iVerify and Report URI revealed cyberattacks operating through ads and expired domains without user action.
    • The exploits target iPhone users whose software has not been updated and remains vulnerable.
    • SlowMist issued a security alert warning iPhone and iPad users about DarkSword malware targeting cryptocurrency wallets.

    Still unconfirmed

    • Users may be compromised simply by scrolling past an ad on platforms like Instagram.

    What to watch next

    • Further technical breakdowns of the exploit chain from security researchers
    • Apple security updates addressing the specific iOS vulnerabilities being exploited
    • Additional disclosures regarding the specific abandoned domains and ad networks involved
    Sources used for this update (12)
    1. Forbes — Hackers Are Serving Malware To iPhones Via Hundreds Of Infected Websites
    2. Axios — Hackers are turning web browsing into a spyware trap
    3. AL.com — Scheme alert: iPhone users may be hacked by scrolling past ad or visiting legitimate websites
    4. Fox News — New iPhone spyware can steal passwords and photos
    5. KuCoin — DarkSword Targets iPhone Crypto Users to Steal Wallet Private Keys
    6. iVerify — Dead Domains, Live Exploits: How Infected Ads and Expired Analytics Tags Deliver Coruna and DarkSword to iPhones
    7. Incrypted — Weekly: $68,000 Stolen from Ukrainian in Trust Wallet, Circle Lawsuit Against Trump over $2B in the UAE, and Historic Solana Upgrade
    8. www.ibtimes.sg — Hackers Turn Malicious Ads Into iPhone Spyware Trap ...
    9. tech.yahoo.com — Security experts reveal how your iPhone can be hacked while ...
    10. xab.info — Ordinary ads can break your iPhone: how hackers steal data ...
    11. cybersecuritynews.com — Hackers Use Malicious Instagram Ads to Infect iPhones With ...
    12. www.gate.com — SlowMist Warns iPhone Users of DarkSword Malware Targeting ...
    confidence 100%
📊

Community Sentiment: How do you assess this situation?

Voice your perspective · Real-time aggregated sentiment from the Live Feeds community