Double-edged threat. [Research Saturday]

CyberWire Daily

N2K Networks, Inc.

Technology, Tech News, Daily News, News

4.8 • 1.1K Ratings

🗓️ 2 May 2026

⏱️ 31 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Today we are joined by Justin Albrecht, Principal Researcher at Lookout, discussing "Attackers Wielding DarkSword Threaten iOS Users." DarkSword is a highly sophisticated iOS exploit chain discovered by Lookout that targets iPhones (iOS 18.4–18.6.2), enabling near zero-click compromise and rapid theft of sensitive data, including credentials and cryptocurrency wallet information. Likely deployed by a Russia-linked threat actor (UNC6353) against Ukrainian users, it uses watering hole attacks on compromised websites and operates in a “hit-and-run” fashion—exfiltrating data within minutes before wiping traces. The campaign highlights a growing secondary market for advanced exploits, allowing financially motivated groups to access powerful tools once reserved for state actors, significantly expanding the mobile threat landscape. The research and executive brief can be found here: ⁠Attackers Wielding DarkSword Threaten iOS Users Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:11.3	And now a word from our sponsor, the Center for Cyber Health and Hazard Strategies, also known as
0:17.6	CHHS.
0:19.1	Looking for a graduate degree that will give you an edge on your professional career?
0:22.6	Earn a Master of Science in Law at University of Maryland Carey School of Law.
0:28.6	This part-time two-year online graduate degree program is designed for experienced
0:33.6	professionals to understand laws and policies that impact your industry.
0:38.8	Learn from CHS faculty, who are experts in their field.
0:43.0	No GRE required.
0:44.9	Learn how you can master the law without a JD at law.u-maryland.edu.
0:50.9	Thank you. E.DU. Hello, everyone, and welcome to the CyberWires Research Saturday.
1:05.0	I'm Dave Bittner, and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,
1:12.9	solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.
1:18.7	Thanks for joining us.
1:24.9	So basically, Google released a report on something called Karuna, and Karuna is an iOS
1:34.0	exploit chain. Actually, it's multiple iOS exploit chains consisting of 23 different vulnerabilities
1:40.2	that were used in watering hole attacks to target various entities.
1:47.0	That's Justin Albrecht, principal researcher at Lookout.
1:51.0	The research we're discussing today is titled,
1:54.0	Attackers Weielding Dark Sword Threaten iOS Users. users.
2:08.4	And some of those attacks were conducted by a Russian threat actor.
2:13.0	This Russian threat actor is called UNC 6353.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.