DarkSword攻擊工具利用iOS漏洞，對加密貨幣錢包安全構成重大威脅

新的見解表明，DarkSword 攻擊工具正在利用 iOS 安全漏洞來攻擊加密貨幣錢包，數百萬人面臨風險。

iOS Under Siege: DarkSword Tool Targets Crypto Wallets, Millions in Assets at Risk

iOS 遭圍攻：DarkSword 工具瞄準加密錢包，數百萬資產面臨風險

In a chilling development for cryptocurrency enthusiasts, the sophisticated DarkSword attack tool is reportedly exploiting critical security vulnerabilities within Apple's iOS operating system. Recent allegations suggest this malicious software has already led to the theft of approximately $5.57 million from unsuspecting users' cryptocurrency wallets, primarily through deceptive website attacks.

據報導，複雜的 DarkSword 攻擊工具正在利用蘋果 iOS 作業系統中的關鍵安全漏洞，這讓加密貨幣愛好者感到震驚。最近的指控表明，該惡意軟體已導致毫無戒心的用戶的加密貨幣錢包被盜約 557 萬美元，主要是透過欺騙性網站攻擊。

How DarkSword Operates: A Digital Trap

《暗劍》如何運作：數位陷阱

Cybersecurity researchers have uncovered that DarkSword operates by luring iPhone users to malicious websites via the Safari browser. Once a user visits such a site, the tool can compromise their device, gaining access to sensitive information including passwords, messages, photos, and crucially, data related to cryptocurrency wallets. The primary targets are private keys and recovery words (seed phrases), the very keys to users' digital fortunes. Obtaining these can directly lead to the illicit transfer of cryptocurrency assets.

網路安全研究人員發現，DarkSword 的運作方式是透過 Safari 瀏覽器引誘 iPhone 使用者造訪惡意網站。一旦用戶訪問此類網站，該工具就可以破壞他們的設備，獲取敏感訊息，包括密碼、訊息、照片，以及最重要的與加密貨幣錢包相關的數據。主要目標是私鑰和恢復詞（種子短語），它們是用戶數位財富的關鍵。獲得這些可以直接導致加密貨幣資產的非法轉移。

A Price on Vulnerability: DarkSword's Source Code on the Market

漏洞的價格：市場上的 DarkSword 原始碼

Adding a disturbing layer to this threat, the source code for DarkSword is allegedly being peddled on illicit online marketplaces for a hefty $30,000. While the seller claims the tool targets up to iOS 18.6.2, researchers have observed code snippets indicating potential future adaptations for iOS 26 and iOS 27. Efforts to adapt older code using artificial intelligence for newer iOS versions have reportedly seen limited success, though the threat landscape is constantly evolving.

據稱，DarkSword 的源代碼在非法線上市場上以 30,000 美元的高價兜售，這為這一威脅增添了令人不安的一層。雖然賣家聲稱該工具的目標最高可達 iOS 18.6.2，但研究人員觀察到程式碼片段表明未來可能對 iOS 26 和 iOS 27 進行調整。據報道，儘管威脅情勢不斷演變，但使用人工智慧將舊程式碼調整為新 iOS 版本的努力取得了有限的成功。

The Evolving Threat: New Vulnerabilities and Targeted Wallets

不斷演變的威脅：新漏洞和目標錢包

Google's earlier analysis identified six distinct vulnerabilities exploited by DarkSword, all of which Apple has since patched. However, the persistent threat lies in the potential discovery of new, undiscovered vulnerabilities in current iPhone models. Security experts warn that if attackers find new exploits, existing malicious code designed to scan cryptocurrency wallets could be quickly repurposed. Notably, improvements to DarkSword have included specific functions targeting data from popular wallets like imToken.

谷歌早期的分析發現了 DarkSword 利用的六個不同漏洞，蘋果已經修復了所有這些漏洞。然而，持續的威脅在於目前 iPhone 型號中可能發現新的、未被發現的漏洞。安全專家警告說，如果攻擊者發現新的漏洞，旨在掃描加密貨幣錢包的現有惡意程式碼可能很快就會被改變用途。值得注意的是，DarkSword 的改進包括針對來自 imToken 等流行錢包的資料的特定功能。

A Wide Net: Millions of Users Potentially Exposed

廣闊的網路：數百萬用戶可能受到影響

The infrastructure used to distribute DarkSword's malicious code is linked to websites that collectively receive an astonishing 135 million visits per month. This vast reach underscores the potential for widespread attacks should new iOS vulnerabilities be discovered. Security experts are strongly advising cryptocurrency investors to ensure their iPhones are updated to the latest iOS version. Furthermore, critical advice includes avoiding storing wallet recovery words in photo galleries, screenshots, or the Notes app – essentially, anywhere easily accessible.

用於分發 DarkSword 惡意程式碼的基礎設施所連結的網站每月的訪問量總計達到驚人的 1.35 億次。這種巨大的影響力凸顯瞭如果發現新的 iOS 漏洞，可能會引發廣泛的攻擊。安全專家強烈建議加密貨幣投資者確保他們的 iPhone 更新到最新的 iOS 版本。此外，重要的建議包括避免將錢包恢復文字儲存在照片庫、螢幕截圖或筆記應用程式中——本質上是在任何容易訪問的地方。

Stay Vigilant, Stay Safe

保持警惕，保持安全

While the threat posed by DarkSword is serious, staying informed and proactive can significantly bolster your digital defenses. Keep those devices updated, and treat your crypto recovery phrases like the digital gold they are!

雖然 DarkSword 構成的威脅很嚴重，但保持資訊靈通並積極主動可以顯著增強您的數位防禦能力。保持這些裝置更新，並像對待數位黃金一樣對待您的加密復原短語！