P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
2026-10-11T19:23:59Z•ee491cdcb8489758e9648e7a208c0d7ec55841550046aa007b70f5c279a5f2bc
CVE-2015-3306CVE-2026-105133CVE-2026-107406AI-securityAhsayCBSCISA-KEVChina-linked-threat-actorFlax-TyphoonGitHub-ActionsNetScalerProFTPDRussia-linked-threat-actorcredential-theftcritical-infrastructurecryptocurrency-theftcryptominingdata-exfiltrationexploit-kitiOSinfostealermalicious-browser-extensionsmobile-malwarenpmphishingransomwareremote-access-trojansoftware-supply-chain
What happened
The feed highlights active cyber threats and vulnerabilities, including a P7 DarkSword iOS exploit kit with keychain and cryptocurrency-wallet theft, credential-stealing GitHub Actions workflows, actively exploited AhsayCBS and other vulnerabilities, China- and Russia-linked campaigns, malicious browser extensions and npm packages, phishing kits, and critical infrastructure intrusions. Several stories involve working exploits or confirmed exploitation, creating significant risk for exposed systems, developers, financial organizations, government entities, and cryptocurrency users.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- ee491cdcb8489758e9648e7a208c0d7ec55841550046aa007b70f5c279a5f2bc
- Enrichment time
- 2026-10-11T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.