DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses
2026-03-25T02:51:46Z•6ee74b5f5247417e78d9d60f23891af0d731e1a7fbdbb6cb2df21983251bad12
AI phishingAleksei VolkovDarkSwordFCCGitHub leakIranian threat actorsTelegram malwareTrivyYanluowangexploit codeextortioniOSiOS 18initial access brokermalicious packagesmobile exploitationphishingransomwarerouter bansoftware supply chainsupply chain compromisesupply chain risk assessment','US Treasury','terrorism risk-insuvishingvoice phishingzero-day
What happened
This feed aggregates multiple high-risk developments: a leaked DarkSword GitHub repository reportedly exposes iPhone/iOS 18 exploit code that could ‘democratize’ elite zero‑click/privilege‑escalation techniques; a supply‑chain compromise of the open‑source scanner Trivy led to malicious upstream packages and warnings of an imminent extortion wave affecting thousands of downstream victims; the FBI alerted on an ongoing Telegram‑delivered malware campaign attributed to Iranian actors; Huntress reported an AI‑powered phishing campaign compromising hundreds of organizations; and security firms are
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cyberscoop
- Record identifier
- 6ee74b5f5247417e78d9d60f23891af0d731e1a7fbdbb6cb2df21983251bad12
- Enrichment time
- 2026-03-25T02:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.