Google's security team has disclosed a chain of iOS vulnerabilities that could steal cryptocurrency wallet data.

According to Google Threat Intelligence Group, an iOS exploit chain called DarkSword is targeting iPhones running iOS versions 18.4 to 18.7. Attackers deploy malware called Ghostblade on compromised websites. This malware is designed for rapid data theft, automatically deleting temporary files and terminating its operation after data collection. It also specifically searches for and steals data from cryptocurrency wallet applications, reportedly involving multiple crypto wallets such as Ledger, Trezor, MetaMask, and Exodus. In addition, Ghostblade also simultaneously steals sensitive information such as SMS messages, iMessages, contacts, Wi-Fi passwords, geolocation data, and chat logs from Telegram and WhatsApp.