DarkSword攻击工具利用iOS漏洞，对加密货币钱包安全构成重大威胁

新的见解表明，DarkSword 攻击工具正在利用 iOS 安全漏洞来攻击加密货币钱包，数百万人面临风险。

iOS Under Siege: DarkSword Tool Targets Crypto Wallets, Millions in Assets at Risk

iOS 遭围攻：DarkSword 工具瞄准加密钱包，数百万资产面临风险

In a chilling development for cryptocurrency enthusiasts, the sophisticated DarkSword attack tool is reportedly exploiting critical security vulnerabilities within Apple's iOS operating system. Recent allegations suggest this malicious software has already led to the theft of approximately $5.57 million from unsuspecting users' cryptocurrency wallets, primarily through deceptive website attacks.

据报道，复杂的 DarkSword 攻击工具正在利用苹果 iOS 操作系统中的关键安全漏洞，这令加密货币爱好者感到震惊。最近的指控表明，该恶意软件已导致毫无戒心的用户的加密货币钱包被盗约 557 万美元，主要是通过欺骗性网站攻击。

How DarkSword Operates: A Digital Trap

《暗剑》如何运作：数字陷阱

Cybersecurity researchers have uncovered that DarkSword operates by luring iPhone users to malicious websites via the Safari browser. Once a user visits such a site, the tool can compromise their device, gaining access to sensitive information including passwords, messages, photos, and crucially, data related to cryptocurrency wallets. The primary targets are private keys and recovery words (seed phrases), the very keys to users' digital fortunes. Obtaining these can directly lead to the illicit transfer of cryptocurrency assets.

网络安全研究人员发现，DarkSword 的运作方式是通过 Safari 浏览器引诱 iPhone 用户访问恶意网站。一旦用户访问此类网站，该工具就可以破坏他们的设备，获取敏感信息，包括密码、消息、照片，以及最重要的与加密货币钱包相关的数据。主要目标是私钥和恢复词（种子短语），它们是用户数字财富的关键。获得这些可以直接导致加密货币资产的非法转移。

A Price on Vulnerability: DarkSword's Source Code on the Market

漏洞的价格：市场上的 DarkSword 源代码

Adding a disturbing layer to this threat, the source code for DarkSword is allegedly being peddled on illicit online marketplaces for a hefty $30,000. While the seller claims the tool targets up to iOS 18.6.2, researchers have observed code snippets indicating potential future adaptations for iOS 26 and iOS 27. Efforts to adapt older code using artificial intelligence for newer iOS versions have reportedly seen limited success, though the threat landscape is constantly evolving.

据称，DarkSword 的源代码在非法在线市场上以 30,000 美元的高价兜售，这为这一威胁增添了令人不安的一层。虽然卖家声称该工具的目标最高可达 iOS 18.6.2，但研究人员观察到代码片段表明未来可能对 iOS 26 和 iOS 27 进行调整。据报道，尽管威胁形势在不断演变，但使用人工智能将旧代码调整为新 iOS 版本的努力取得了有限的成功。

The Evolving Threat: New Vulnerabilities and Targeted Wallets

不断演变的威胁：新漏洞和目标钱包

Google's earlier analysis identified six distinct vulnerabilities exploited by DarkSword, all of which Apple has since patched. However, the persistent threat lies in the potential discovery of new, undiscovered vulnerabilities in current iPhone models. Security experts warn that if attackers find new exploits, existing malicious code designed to scan cryptocurrency wallets could be quickly repurposed. Notably, improvements to DarkSword have included specific functions targeting data from popular wallets like imToken.

谷歌早期的分析发现了 DarkSword 利用的六个不同漏洞，苹果已经修复了所有这些漏洞。然而，持续的威胁在于当前 iPhone 型号中可能发现新的、未被发现的漏洞。安全专家警告说，如果攻击者发现新的漏洞，旨在扫描加密货币钱包的现有恶意代码可能会很快被改变用途。值得注意的是，DarkSword 的改进包括针对来自 imToken 等流行钱包的数据的特定功能。

A Wide Net: Millions of Users Potentially Exposed

广阔的网络：数百万用户可能受到影响

The infrastructure used to distribute DarkSword's malicious code is linked to websites that collectively receive an astonishing 135 million visits per month. This vast reach underscores the potential for widespread attacks should new iOS vulnerabilities be discovered. Security experts are strongly advising cryptocurrency investors to ensure their iPhones are updated to the latest iOS version. Furthermore, critical advice includes avoiding storing wallet recovery words in photo galleries, screenshots, or the Notes app – essentially, anywhere easily accessible.

用于分发 DarkSword 恶意代码的基础设施所链接的网站每月的访问量总计达到惊人的 1.35 亿次。这种巨大的影响力凸显了如果发现新的 iOS 漏洞，可能会引发广泛的攻击。安全专家强烈建议加密货币投资者确保他们的 iPhone 更新到最新的 iOS 版本。此外，重要的建议包括避免将钱包恢复文字存储在照片库、屏幕截图或笔记应用程序中——本质上是在任何容易访问的地方。

Stay Vigilant, Stay Safe

保持警惕，保持安全

While the threat posed by DarkSword is serious, staying informed and proactive can significantly bolster your digital defenses. Keep those devices updated, and treat your crypto recovery phrases like the digital gold they are!

虽然 DarkSword 构成的威胁很严重，但保持信息灵通并积极主动可以显着增强您的数字防御能力。保持这些设备更新，并像对待数字黄金一样对待您的加密恢复短语！