New iPhone spyware can steal passwords and photos

Key Points:

• Security researchers at iVerify discovered a new, more aggressive variant of iPhone spyware called P7 DarkSword, capable of stealing sensitive data such as saved passwords, cryptocurrency wallet information, personal photos, and Apple Notes from infected devices.
• P7 DarkSword communicates frequently with attackers through a command-and-control system, allowing remote commands and making it harder to detect by injecting into core iPhone processes and reducing diagnostic logging.
• The spyware infects iPhones primarily through malicious web content exploiting vulnerabilities in outdated iOS versions; Apple has patched these vulnerabilities in updates released before and during 2025 and 2026.
• iPhone users can protect themselves by installing the latest iOS updates, enabling Background Security Improvements, using strong antivirus software, activating Apple's Lockdown Mode for high-risk individuals, and securing accounts with strong passwords and two-factor authentication.
• If users suspect infection, they should avoid sensitive activities on the device, secure accounts from a trusted device, preserve suspicious messages, and seek help from mobile security professionals rather than immediately resetting the iPhone.