Escalating risks tied to advanced mobile threats are drawing scrutiny after Binance warned of a critical iOS vulnerability on March 20 via X, linking it to the Darksword exploit chain. The issue affects Apple devices running iOS 18.4 through 18.7 and enables covert access to sensitive data.
Binance wrote:
“Apple is urging iPhone/iPad users to update iOS immediately.”
The alert referenced research from the Google Threat Intelligence Group, which identified Darksword as a full-chain exploit built on multiple zero-day vulnerabilities, meaning previously unknown software flaws that attackers can exploit before developers release fixes.
According to the findings, the exploit chain has been in use since at least November 2025 and has been adopted by multiple threat actors, including commercial surveillance vendors and suspected state-backed groups. Campaigns have targeted users in Saudi Arabia, Turkey, Malaysia, and Ukraine, often using compromised or spoofed websites to silently deliver malicious code.
Zero-Click Attack Raises Stakes for Mobile SecurityThe exploit’s ability to execute automatically without user interaction significantly increases its impact, particularly for routine web browsing. Users are urged to install the latest iOS updates, limit exposure to untrusted links, review application permissions, and strengthen account protections such as two-factor authentication and withdrawal safeguards. Binance cautioned:
FAQ 🧭 Why is the Darksword exploit significant for crypto users? It can silently access and extract cryptocurrency wallet data without user interaction. Which devices are most at risk from this vulnerability? Apple devices running iOS 18.4 through 18.7 are specifically affected. What makes this exploit especially dangerous? It uses zero-day flaws and leaves little to no trace after execution. What should investors and users do immediately? Update iOS, enable strong security settings, and avoid suspicious links.
