Hacking News
iVerify discovers P7 DarkSword iPhone spyware targeting crypto wallets
iVerify reported that the P7 DarkSword spyware is capable of scanning iPhones for installed cryptocurrency wallet applications and extracting data from the imToken app on devices that are already compromised. In addition to wallet information, the malware can harvest stored passwords, entries from Apple Notes, personal photos, and other application files. The tool operates on a default fifteen‑second cycle that continuously polls for commands from the attacker, rather than guaranteeing that wallet data will be extracted at each interval. Researchers noted that, despite its capabilities, they have not observed any successful crypto theft performed by the spyware. They also confirmed that the malware does not appear to bypass the most recent iOS security patches. The findings highlight a new vector for targeting crypto assets on iOS devices.