WASHINGTON/KYIV: A new investigation has revealed that users of Apple devices, particularly the iPhone, may once again be at risk as a sophisticated spyware campaign capable of stealing sensitive data has been uncovered.
Researchers said the malware, dubbed “Dark Word,” was deployed in recent weeks through dozens of compromised websites in Ukraine, targeting unsuspecting iPhone users.
The discovery marks the second such revelation this month, following the identification of another powerful spyware tool known as “Corona,” indicating a growing trend of advanced cyber threats targeting Apple devices.
The investigation involved experts from cybersecurity firms Lookout and iVerify, along with analysts linked to Alphabet, who conducted a coordinated analysis of the malware.
According to researchers, the spyware specifically targeted devices running iOS versions 18.4 through 18.6.2. Users visiting infected websites were vulnerable to having their data — including information from cryptocurrency wallets — accessed or stolen.
While the exact number of affected devices remains unclear, estimates suggest that between 220 million and 270 million iPhones globally may still be running vulnerable versions of the operating system.
A spokesperson for Apple said the attacks primarily targeted outdated software, adding that the company has addressed the underlying vulnerabilities through multiple security updates.
The spokesperson stressed that keeping devices updated remains the most effective way for users to protect their data and maintain device security.
Experts warned that the emergence of such advanced malware highlights the rapid growth of a cybercriminal ecosystem focused on data theft and financial exploitation, particularly targeting digital assets.