White search icon
News

New iPhone Hacking Tools Target Ukraine: Researchers Uncover Darksword

Cybersecurity researchers uncover a new hacking toolkit called Darksword targeting iPhones used by hackers suspected of working for Russian government.

18-03-2026 |


Cybersecurity researchers uncover a new hacking toolkit called Darksword targeting iPhones used by hackers suspected of working for Russian government.

Recent revelations in the tech security world have shed light on a new and sophisticated hacking toolkit called Darksword, which has been targeting iPhones used by individuals in Ukraine. This discovery comes as part of ongoing investigations into cyberattacks that appear to be linked to state-sponsored actors, with particular suspicion falling on Russian government involvement.

Understanding Darksword: A New Tool for Espionage?

The Darksword toolkit was identified by cybersecurity researchers from Google and security firms iVerify and Lookout. These experts have been closely monitoring a series of cyberattacks that seem to be connected, with the latest campaign utilizing this new set of tools.

Scope and Impact: Limited but Potentially Dangerous

The attacks using Darksword are currently confined to users in Ukraine. While this limitation suggests some level of restraint on behalf of the hackers, it also raises questions about their motivations and capabilities. The toolkit is capable of stealing personal data from iPhones as well as potentially targeting cryptocurrency wallets, making its use highly dangerous for those who fall victim.

According to reports, Darksword was first used by a government customer of a surveillance tech vendor before being adopted by Russian spies and later Chinese cybercriminals. This multi-layered usage pattern indicates that the toolkit is not only effective but also adaptable across different user groups and purposes.

The Broader Context: Coruna and Its Predecessors

It’s worth noting that this isn’t the first time such sophisticated hacking tools have been discovered. In early March, Google had already revealed details of a similar toolkit called Coruna. The discovery of both toolkits suggests that advanced spyware for iPhones may not be as rare or difficult to develop as previously thought.

The fact that these tools are being used by multiple groups with different objectives—government espionage, state-sponsored attacks, and cybercrime—highlights the growing threat posed by sophisticated hacking techniques. As cybersecurity experts continue their investigations, it remains unclear whether Darksword is a standalone tool or part of an even larger arsenal.

The Implications for iPhone Users Worldwide

While the current scope of these attacks appears limited to Ukraine, the implications are far-reaching. The success and adaptability of tools like Darksword could potentially inspire other hackers to develop similar capabilities or even purchase them from black markets.

This situation underscores the need for heightened vigilance among iPhone users globally. Security updates should be kept up-to-date, strong passwords used, and privacy settings adjusted as necessary. For businesses operating in regions where state-sponsored cyberattacks are a concern, robust cybersecurity measures must become a top priority.


An unhandled error has occurred. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.