SlowMist: DarkSword Targets iPhone Crypto Users
SlowMist issues a threat intelligence alert on the DarkSword trojan exploiting iOS vulnerabilities to steal Keychain data, wallet private keys and Notes from crypto users, urging immediate iOS updates after identifying over 1,500 related phishing sites.
SourceAnalysis
SlowMist flagged the DarkSword trojan for targeting iPhone and iPad crypto holders by escaping the sandbox to extract Keychain credentials, locally stored wallet private keys and Notes data. The firm identified more than 1,500 phishing domains mimicking e-commerce platforms, Binance, OKX, wallets and exchanges. CZ Binance amplified the warning on November 5, 2026, repeating the core advice to update iOS immediately and avoid storing seed phrases in Notes.
CZ_BNB
@cz_binanceFounder and former CEO of Binance, the world's largest cryptocurrency exchange. Shares insights on cryptocurrency adoption, blockchain technology development, and personal perspectives on building in the Web3 space, while navigating regulatory challenges and industry evolution.