P7 DarkSword iOS Exploit Kit Introduces Crypto Theft and Two-Way C2 Communication

According to a report published by iVerify, the P7 DarkSword variant represents a shift in the DarkSword iOS exploit kit's capabilities. Compared with previously observed variants, P7 DarkSword reduces its on-device footprint, making it more difficult to detect. The variant adds the ability to steal data from the iOS keychain and cryptocurrency wallet applications. Furthermore, it establishes two-way C2 communication, allowing attackers to send remote commands to compromised devices. The research was covered by The Hacker News. Specific exploit chains, C2 protocols, CVE identifiers, and victim counts have not been detailed in the available summaries and are considered unconfirmed. Mitigation guidance focuses on keeping iOS devices updated, avoiding untrusted enterprise certificates or sideloaded applications, and monitoring for suspicious device behavior.