Connect with us

Tech

The DarkSword exploit on iOS 18 compromises cryptocurrency wallets across six platforms

Published

6 months ago

on

Google researchers have detected the DarkSword exploit on iOS 18 devices affecting versions 18.4 through 18.7, according to the Google Threat Intelligence report. This exploit chain utilizes six critical vulnerabilities to inject the Ghostblade malware, which extracts sensitive data from six exchange platforms and multiple digital wallets without leaving any apparent trace.

The intrusion chain is activated when users access compromised web portals that execute arbitrary code in the background. This silent process leverages flaws in the system’s rendering engine to install malicious components without requiring direct interaction from the owner of the affected device. The sophistication of DarkSword demonstrates a level of engineering previously reserved for government-level espionage operations.

Mobile espionage reaches critical levels of technical precision

Once inside the Apple environment, the Ghostblade component scans the system for centralized exchange applications such as Binance and Kraken. The objective is to capture login credentials and session tokens that allow total control over the user’s funds. This surgical approach minimizes system alerts, allowing the data extraction to occur within a matter of seconds.

The danger extends to self-custody solutions, including cold and hot wallets such as MetaMask, Ledger, and Phantom. By intercepting seed phrases and private keys during transaction processes, the malware nullifies the inherent security of physical storage for digital assets. The vulnerability puts the financial integrity of both retail and institutional investors at significant risk today.

Beyond financial data, the exploit extracts personal metadata including call logs, Wi-Fi passwords, and browsing cookies. This massive exfiltration capability allows for much more effective subsequent social engineering attacks against the victim. The collection of health and location data adds an extremely intrusive dimension of personal surveillance for any mobile user.

How does DarkSword alter the security paradigm for mobile devices?

From a technical perspective, Ghostblade introduces a tactical innovation based on the volatility of its files within the internal storage. After completing the data transfer to external command centers, the program automatically deletes its traces to avoid detection by mobile security tools. This ephemeral behavior makes it extremely difficult to create effective detection signatures at this time.

The geographic distribution of the campaign suggests advanced coordination, affecting critical infrastructure in nations such as Ukraine and Saudi Arabia. In these cases, the impersonation of legitimate government portals to spread the virus among the civilian population has been observed. This “watering hole” tactic maximizes the infection rate by abusing pre-existing institutional trust.

Historically, the blockchain sector has been the target of massive attacks such as the one recorded by Inferno Drainer, which stole nine million dollars. However, DarkSword represents a superior threat by acting directly on the operating system, differing from conventional phishing scams. The scale of this new risk demands a complete re-evaluation of security protocols.

To mitigate these risks, it is imperative that Apple device users install the latest security patches immediately. Reliance on SMS-based two-factor authentication should be reduced, opting instead for physical security keys or independent authentication apps. It is vital to prevent intrusions via software from unverified sources to maintain financial sovereignty.

The future of mobile security will depend on the manufacturers’ ability to close zero-day gaps before their exploitation. Meanwhile, constant monitoring of data flows and the use of isolated environments for cryptographic transactions are recommended measures. The industry must prepare for a new era of persistent threats that challenge the closed architecture of iOS continuously.

The post The DarkSword exploit on iOS 18 compromises cryptocurrency wallets across six platforms appeared first on The Cryptocurrency Post.

Related Topics:
Continue Reading

Tech

Noos sets September 5 mainnet launch as it moves AI agent infrastructure on-chain

Published

2 weeks ago

on

September 1, 2026

By

Noos said its mainnet will go live at 00:00 UTC on September 5, 2026, marking the project’s shift from testnet operation to an on-chain environment for AI agent execution, collaboration, verification and value settlement.

The announcement was published on Noos’ official blog, which described the launch as a step toward the AI agent economy rather than a simple network transition. The post said the project has spent 159 days building on testnet ahead of mainnet.

In a separate post on Noos’ official X account, the team said the move will bring those functions fully on-chain once mainnet opens. The same materials say Noos has been working across ecosystem partners, nodes, users and communities ahead of launch.

Testnet phase set the backdrop for launch

Noos said its testnet began on March 20, 2026 and continued for 159 days. During that period, the project said it completed phased testing of core infrastructure that includes AI Agents, AI Skills, Genesis AIDs and the IVN validation network.

The project also said its testnet phase involved more than 50 ecosystem partners, 700+ global KOLs, 3,500+ globally distributed computing nodes and 5,000 on-chain Genesis AIDs. Those figures were presented by Noos as part of the foundation for the mainnet rollout.

According to the announcement, mainnet is expected to move the network beyond infrastructure validation and into “real usage, execution, collaboration, and value.”

Noos frames the launch around the AI agent economy, a concept it says requires computing power, agent skills, verification, payments, data, smart hardware and vertical applications to work together. The company’s message indicates the mainnet is intended to connect those pieces in a live on-chain environment, though the announcement does not add further operational details beyond the launch timing and broader network goals.

The post Noos sets September 5 mainnet launch as it moves AI agent infrastructure on-chain appeared first on The Cryptocurrency Post.

Continue Reading

Tech

Algorand launches AC2 to let AI agents request user approvals without exposing private keys

Published

2 weeks ago

on

August 28, 2026

By

Algorand Foundation has launched AC2, an open protocol designed to make AI agent approvals more secure by keeping private keys under the user’s control. In the foundation’s public announcement, AC2 is described as a standard for direct, encrypted communication between users and AI agents that lets agents request signing actions without handing over wallet access.

The launch centers on a familiar problem in AI-driven workflows: agents may need to sign payments, code commits or other digital actions on a user’s behalf, but the surrounding messaging tools do not provide cryptographic verification or scoped approval. Algorand says AC2 is meant to close that gap by allowing the user to review and approve each requested action through their own wallet interface.

How AC2 is described to work

According to the foundation, AC2 establishes an end-to-end encrypted WebRTC connection between a user’s wallet or app and an AI agent. When the agent needs authorization for an action such as a payment, git commit or API request, it sends a signing request through AC2. The user then approves the action directly, while the private key remains with the user.

The announcement also says the protocol is blockchain-agnostic and open source, with both the specification and a reference implementation now available. Algorand framed AC2 as a way to support broader “agentic” workflows without requiring users to surrender full control of their accounts.

The foundation said the protocol can be extended for different message types and signing formats, which it says would make it usable in settings where agents need limited, user-approved authority rather than unrestricted access.

For now, the launch is best understood as a security and communications layer for AI agents rather than evidence that AI payments or agent-driven commerce are already widespread. The key change is narrower but concrete: users are meant to approve exactly what an agent can sign, instead of relying on chat-based instructions that can be easier to spoof or misread.

The post Algorand launches AC2 to let AI agents request user approvals without exposing private keys appeared first on The Cryptocurrency Post.

Continue Reading

Tech

Token Terminal data shows AI agents driving 73 million stablecoin transfers in 180 days

Published

2 weeks ago

on

August 27, 2026

By

Token Terminal’s agentic payments explorer shows AI agents initiating 73.0 million stablecoin transfers over the past 180 days, with USDC accounting for virtually all of the activity.

The explorer data also points to a concentration of transfers on a small number of networks. Base led with 38.7 million transfers, while Polygon followed with 26.1 million, according to Token Terminal.

The figures describe transfer activity initiated by AI agents, not a broader measure of stablecoin adoption across the market. The available data also does not by itself explain who the agents were, what applications they were using or whether the transfers reflect sustained operational usage beyond the measured period.

Still, the numbers offer a concrete snapshot of how agent-driven payments are appearing in onchain data. In this case, the activity is largely tied to USDC and concentrated on Base and Polygon, which makes the breakdown more specific than a generic claim about AI and crypto payments.

The post Token Terminal data shows AI agents driving 73 million stablecoin transfers in 180 days appeared first on The Cryptocurrency Post.

Continue Reading

Trending