P7 DarkSword adds crypto-wallet theft and two-way C2 to the iOS exploit kit

On October 11, 2026, iVerify documents P7 DarkSword, a variant of the DarkSword iOS exploit kit that shrinks its footprint, extracts the keychain and crypto wallets directly on-device, and adds a two-way command channel. Update past iOS 18.4.1 and treat any WebKit exploit chain as a credential-theft vector, not just mobile malware.