Gate News Report, March 20 — According to Google Threat Intelligence Group monitoring, a vulnerability exploitation chain called DarkSword is targeting iPhones running iOS versions 18.4 to 18.7. Attackers are deploying malicious software named Ghostblade on compromised websites, which specifically searches for and steals data from several major cryptocurrency exchanges (including a CEX) and wallet apps (including Ledger, Trezor, MetaMask, Exodus, Uniswap, Phantom, and Gnosis Safe). Additionally, Ghostblade also synchronizes and steals sensitive information such as SMS, iMessage, contacts, Wi-Fi passwords, geolocation, and chat records from Telegram and WhatsApp. The malware is designed for rapid data theft; after collecting data, it automatically deletes temporary files and terminates itself. Currently, the attack activity has been observed in Saudi Arabia, Turkey, Malaysia, and Ukraine.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
