{"vulnerability": "cve-2025-43510", "sightings": [{"uuid": "97e5cddd-176f-49fc-be7b-11642d7250e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkavkbc27", "content": "", "creation_timestamp": "2026-03-21T21:03:05.720553Z"}, {"uuid": "a263a0f4-6112-4d48-80e7-dab6af2a7810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-43510", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acc5e3d7-0f5d-4cb9-8b1d-81455d13f27d", "content": "", "creation_timestamp": "2026-03-20T16:00:10.306561Z"}, {"uuid": "329dcd11-103d-43db-ad90-98963d79815a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmd65hb2b", "content": "", "creation_timestamp": "2026-03-19T21:02:58.663371Z"}, {"uuid": "e7bbee11-ef8e-4f13-a2b1-bba331ed5eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116262336964134871", "content": "", "creation_timestamp": "2026-03-20T16:01:16.537690Z"}, {"uuid": "d6e75833-04d2-465f-b1a7-ceef7ffd1b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6059880", "content": "", "creation_timestamp": "2026-03-20T16:06:59.991602Z"}, {"uuid": "78785f15-a34e-4afc-bb2e-6da43571a6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-03-20T12:00:00.000000Z"}, {"uuid": "40cc5b04-cf41-4c50-b8df-a3d972c7e9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-darksword-ios-flaws-exploited-attacks/", "content": "", "creation_timestamp": "2026-03-24T03:00:02.000000Z"}, {"uuid": "785529c4-9493-45c4-a818-3e0bdd5331f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw2ejbcj22z", "content": "", "creation_timestamp": "2026-03-25T21:38:02.142811Z"}, {"uuid": "30257c57-6241-45e3-861b-8dc36ae77701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av25-722", "content": "", "creation_timestamp": "2026-03-20T18:07:07.000000Z"}, {"uuid": "6e4fd0e3-efc2-470e-9913-0c6b205813e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "exploited", "source": "https://t.me/true_secator/8007", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "creation_timestamp": "2026-03-18T15:22:35.000000Z"}, {"uuid": "c314efa1-c1d8-4e43-acf6-c1601949da66", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9051d6c0-e197-4873-8b8d-cfa27ebc0ae3", "content": "", "creation_timestamp": "2026-06-19T12:45:14.471441Z"}, {"uuid": "476de3ae-cd33-4050-91dc-9413350b19bb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/880393f6-29a7-402b-9015-2639be9d0174", "content": "", "creation_timestamp": "2026-06-23T14:03:41.097915Z"}, {"uuid": "16014749-d2ba-4696-a17a-1184e3199feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/CQ8nQMs8BNL-Z7vaKvEGnVNaoqTlr5j0_QsaYmRYgkZ8EHg", "content": "", "creation_timestamp": "2026-09-13T15:00:05.729470Z"}, {"uuid": "8df01e50-0488-44ee-940a-c6c2435c108c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/AWkoFg767D37YJFVLP2hvpE2A336baTXU6v1_ymL6aj7Sw4", "content": "", "creation_timestamp": "2026-09-12T12:00:04.859374Z"}, {"uuid": "cbe75c0d-75f1-4fa8-82d9-80430d2a3668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/TlZupgjduvIHJZ3L7vku4R_7_V5Bx_dgLPzGJ6X1oCSFC68", "content": "", "creation_timestamp": "2026-09-12T16:00:09.082175Z"}, {"uuid": "745ecfaf-5840-4a0b-9ca0-91098e0287c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "content": "", "creation_timestamp": "2026-09-12T22:00:05.611915Z"}, {"uuid": "0e0fd57c-34b0-4116-bbeb-2f7951e9daa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "content": "", "creation_timestamp": "2026-09-13T00:00:05.983193Z"}, {"uuid": "a35648d2-dafa-4300-af68-5015002b0a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/1KTvUTSi7Eydz2Zgvb3yvAULumVCOo3s8x855xBc1buEToQ", "content": "", "creation_timestamp": "2026-09-13T05:00:04.700751Z"}, {"uuid": "7d8f3fd9-c88f-4ec5-925d-dcdfe78cdc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/WSHZL1gDBP7KCGKK3R-W2HApOykqOxN1GVtZoP7qMGNNGi8", "content": "", "creation_timestamp": "2026-09-13T19:00:06.805006Z"}, {"uuid": "126e79be-b700-4803-83c4-014ac4061a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/kwhEOs_lBjQ9GUnpMBML3K6wJJ9REMCRoPtFtKI4Qi_EvtM", "content": "", "creation_timestamp": "2026-09-13T22:00:08.479393Z"}, {"uuid": "9b295980-6e8f-4723-b9f7-903cf44be583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/CQ8nQMs8BNL-Z7vaKvEGnVNaoqTlr5j0_QsaYmRYgkZ8EHg", "content": "", "creation_timestamp": "2026-09-14T00:00:12.343748Z"}, {"uuid": "fab26058-6a50-4242-98cc-8faa7315d79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/1KTvUTSi7Eydz2Zgvb3yvAULumVCOo3s8x855xBc1buEToQ", "content": "", "creation_timestamp": "2026-09-14T00:00:30.319464Z"}, {"uuid": "bf4a4481-2c99-4318-9f5b-72f3d5a2d62c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/u1WPiwlSFnvBBDng3MFr7wlITKXQpPT-BlqemGcsMOgMFrU", "content": "", "creation_timestamp": "2026-09-14T04:00:04.041800Z"}, {"uuid": "9da359e3-514a-4665-9413-59ee3c25d490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/UvYs8dujYL9SAEG4Ree92p6gHcxC2s2MVir1G_yY-ucY8Hw", "content": "", "creation_timestamp": "2026-09-14T15:00:03.952363Z"}, {"uuid": "eb21aacb-39c5-4cca-90f8-c4b5da256034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/wgjyJHTUQkU_Aup-7KRVbF84GozcxgQqhZAklKjh9W6ERzQ", "content": "", "creation_timestamp": "2026-09-14T20:00:06.035610Z"}, {"uuid": "873b75d6-898e-486d-ad2a-45d3d29e12c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/AGD5SDO8TDW5GITpulVmfN7JMEyBzHdTcVz94o3GRwTvP0o", "content": "", "creation_timestamp": "2026-09-14T22:00:04.965293Z"}, {"uuid": "23c35169-63d2-420d-a89d-01676c626c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/AGD5SDO8TDW5GITpulVmfN7JMEyBzHdTcVz94o3GRwTvP0o", "content": "", "creation_timestamp": "2026-09-15T00:00:09.331371Z"}, {"uuid": "301a2d80-a1d7-44bb-b93c-3f40a0a52fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/hSG9Wih2ME2PNQO2VEupdPEbIHG13WUV6vwzw59cm6Fnkro", "content": "", "creation_timestamp": "2026-09-15T07:00:05.670156Z"}, {"uuid": "f0a85ab7-31f0-471d-b5d4-09ef8639b7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/12c7l4MsPCuEGNFPjxPaBcpiCFY7aJABo_RsxWIh1dEdtg8", "content": "", "creation_timestamp": "2026-09-15T14:00:06.612770Z"}, {"uuid": "b2e5396a-8275-4966-b77f-c3bfb52a2be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/0yY1wurwAZrB01Th5GWnoeUyGWABJWb321Ym_rmWLE9wQGM", "content": "", "creation_timestamp": "2026-09-15T17:00:04.400476Z"}, {"uuid": "73244bd5-6483-4399-b12d-bb58f3452755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/-jaw7shGWBAW0ZISjxwzBGEYa0PixEtj6vwjZFs2u4xGywg", "content": "", "creation_timestamp": "2026-09-15T23:00:05.885666Z"}, {"uuid": "0c497c9a-211b-4113-88d7-6f0a4d65fdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/0yY1wurwAZrB01Th5GWnoeUyGWABJWb321Ym_rmWLE9wQGM", "content": "", "creation_timestamp": "2026-09-16T00:00:13.547898Z"}, {"uuid": "f486eca3-3f83-4044-9c72-8955509f4f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/12c7l4MsPCuEGNFPjxPaBcpiCFY7aJABo_RsxWIh1dEdtg8", "content": "", "creation_timestamp": "2026-09-16T00:00:13.037039Z"}, {"uuid": "97d4dd63-b943-45d8-b716-4d71c3ff0bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/Ai9lIL90PujQpn_BPUeIJIk72oV_bEcQjGvQVX5tm5YZbUs", "content": "", "creation_timestamp": "2026-09-16T06:00:05.398263Z"}, {"uuid": "2272e44a-a7c0-42e9-94be-dec91aacc880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "Telegram/keniwS0SOR8XfUT7qi4M0GEQBlv0hazqNMMOgVgEkVrtQ8Y", "content": "", "creation_timestamp": "2026-09-25T09:10:24.000000Z"}, {"uuid": "c95efca9-a956-4e6c-aff5-d5b2f6656588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "Telegram/keniwS0SOR8XfUT7qi4M0GEQBlv0hazqNMMOgVgEkVrtQ8Y", "content": "", "creation_timestamp": "2026-09-25T09:10:24.000000Z"}, {"uuid": "79e5c326-d5f7-4286-899e-039e4d09d118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "seen", "source": "https://t.me/poxek/6348", "content": "DarkSword: full-chain \u0434\u043b\u044f iOS 18.4\u201318.7 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 Safari \u0434\u043e \u044f\u0434\u0440\u0430\n\nGoogle Threat Intelligence Group \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 Lookout \u0438 iVerify \u043e\u043f\u0438\u0441\u0430\u043b\u0430 DarkSword \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 spyware-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438 \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0435.\n\n\u0412\u0441\u0435 \u0441\u0442\u0430\u0434\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 JavaScript, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434 PPL/SPTM \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e native-\u043a\u043e\u0434\u0430 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d.\n\n \u0426\u0435\u043f\u043e\u0447\u043a\u0430\nRCE \u0432 WebContent \u0447\u0435\u0440\u0435\u0437 JavaScriptCore:\nCVE-2025-31277 (\u0434\u043e 18.6) \u0438\u043b\u0438 CVE-2025-43529 (18.6\u201318.7, GC-\u0431\u0430\u0433 \u0432 DFG JIT)\n\n\u0417\u0430\u0442\u0435\u043c user-mode PAC bypass \u0432 dyld \u2014 CVE-2026-20700.\n\n\u041f\u043e\u0431\u0435\u0433 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u2014 OOB \u0432 ANGLE \u0447\u0435\u0440\u0435\u0437 WebGL (CVE-2025-14174, sbx0_main.js).\n\n\u0418\u0437 GPU \u0432 mediaplaybackd \u2014 COW-\u0431\u0430\u0433 XNU (CVE-2025-43510, sbx1_main.js), \u043a\u0443\u0434\u0430 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u044f JavaScriptCore.\n\nLPE \u2014 race \u0432 VFS XNU (CVE-2025-43520, pe_main.js).\n\n \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430\n\u0421\u043a\u0440\u044b\u0442\u044b\u0439 iframe \u2192 frame.html \u2192 rce_loader.js, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 iOS \u0442\u044f\u043d\u0435\u0442 rce_worker_18.x.js.\n\u041a\u043b\u044e\u0447 uid \u0432 sessionStorage \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435.\n\n \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\nGHOSTKNIFE, GHOSTSABER, GHOSTBLADE:\n\u2014 iMessage\n\u2014 Telegram\n\u2014 WhatsApp\n\u2014 keychain\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 Wi-Fi\n\u2014 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438\n\u2014 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044f\n\n \u0414\u043b\u044f \u0444\u043e\u0440\u0435\u043d\u0437\u0438\u043a\u0438\nGHOSTKNIFE \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432:\n/tmp/./STORAGE/\n\u0438 \u0447\u0438\u0441\u0442\u0438\u0442 crash-\u043b\u043e\u0433\u0438:\nlet files = MyHelper.getContentsOfDir(\"/var/mobile/Library/Logs/CrashReporter/\");\n// \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438\nif(file.includes(\"mediaplaybackd\")  file.includes(\"SpringBoard\")  file.includes(\"com.apple.WebKit.\") || file.includes(\"panic-full-\"))\n  MyHelper.deleteFileAtPath(file);\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438.\nGHOSTBLADE \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0438\u0441\u0442\u0438\u0442 systemgroup.com.apple.osanalytics/DiagnosticReports/.\n\nIOC\nstatic.cdncounter[.]net \u2014 UNC6353, watering hole \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435\nsnapshare[.]chat \u2014 UNC6748\n\nYARA-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 IOC \u2014 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 GTIG.\n\n\u26a0\ufe0f \u0424\u0438\u043a\u0441\u044b\n23 \u043c\u0430\u0440\u0442\u0430 2026 poc \u0443\u0442\u0451\u043a \u043d\u0430 GitHub.\n\u0424\u0438\u043a\u0441\u044b:\n\u2014 iOS 26.3 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442 dyld\n\u2014 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 18 \u2014 iOS 18.7.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Apple 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 Lockdown Mode.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 23.09.2026.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: GTIG \u2014 The Proliferation of DarkSword\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2MAX", "creation_timestamp": "2026-09-27T09:02:44.000000Z"}, {"uuid": "28b43f34-74b3-4ab7-b7c7-a73923e17ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43510", "type": "published-proof-of-concept", "source": "https://t.me/poxek/6348", "content": "DarkSword: full-chain \u0434\u043b\u044f iOS 18.4\u201318.7 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 Safari \u0434\u043e \u044f\u0434\u0440\u0430\n\nGoogle Threat Intelligence Group \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 Lookout \u0438 iVerify \u043e\u043f\u0438\u0441\u0430\u043b\u0430 DarkSword \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 spyware-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438 \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0435.\n\n\u0412\u0441\u0435 \u0441\u0442\u0430\u0434\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 JavaScript, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434 PPL/SPTM \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e native-\u043a\u043e\u0434\u0430 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d.\n\n \u0426\u0435\u043f\u043e\u0447\u043a\u0430\nRCE \u0432 WebContent \u0447\u0435\u0440\u0435\u0437 JavaScriptCore:\nCVE-2025-31277 (\u0434\u043e 18.6) \u0438\u043b\u0438 CVE-2025-43529 (18.6\u201318.7, GC-\u0431\u0430\u0433 \u0432 DFG JIT)\n\n\u0417\u0430\u0442\u0435\u043c user-mode PAC bypass \u0432 dyld \u2014 CVE-2026-20700.\n\n\u041f\u043e\u0431\u0435\u0433 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u2014 OOB \u0432 ANGLE \u0447\u0435\u0440\u0435\u0437 WebGL (CVE-2025-14174, sbx0_main.js).\n\n\u0418\u0437 GPU \u0432 mediaplaybackd \u2014 COW-\u0431\u0430\u0433 XNU (CVE-2025-43510, sbx1_main.js), \u043a\u0443\u0434\u0430 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u044f JavaScriptCore.\n\nLPE \u2014 race \u0432 VFS XNU (CVE-2025-43520, pe_main.js).\n\n \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430\n\u0421\u043a\u0440\u044b\u0442\u044b\u0439 iframe \u2192 frame.html \u2192 rce_loader.js, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 iOS \u0442\u044f\u043d\u0435\u0442 rce_worker_18.x.js.\n\u041a\u043b\u044e\u0447 uid \u0432 sessionStorage \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435.\n\n \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\nGHOSTKNIFE, GHOSTSABER, GHOSTBLADE:\n\u2014 iMessage\n\u2014 Telegram\n\u2014 WhatsApp\n\u2014 keychain\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 Wi-Fi\n\u2014 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438\n\u2014 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044f\n\n \u0414\u043b\u044f \u0444\u043e\u0440\u0435\u043d\u0437\u0438\u043a\u0438\nGHOSTKNIFE \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432:\n/tmp/./STORAGE/\n\u0438 \u0447\u0438\u0441\u0442\u0438\u0442 crash-\u043b\u043e\u0433\u0438:\nlet files = MyHelper.getContentsOfDir(\"/var/mobile/Library/Logs/CrashReporter/\");\n// \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438\nif(file.includes(\"mediaplaybackd\")  file.includes(\"SpringBoard\")  file.includes(\"com.apple.WebKit.\") || file.includes(\"panic-full-\"))\n  MyHelper.deleteFileAtPath(file);\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438.\nGHOSTBLADE \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0438\u0441\u0442\u0438\u0442 systemgroup.com.apple.osanalytics/DiagnosticReports/.\n\nIOC\nstatic.cdncounter[.]net \u2014 UNC6353, watering hole \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435\nsnapshare[.]chat \u2014 UNC6748\n\nYARA-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 IOC \u2014 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 GTIG.\n\n\u26a0\ufe0f \u0424\u0438\u043a\u0441\u044b\n23 \u043c\u0430\u0440\u0442\u0430 2026 poc \u0443\u0442\u0451\u043a \u043d\u0430 GitHub.\n\u0424\u0438\u043a\u0441\u044b:\n\u2014 iOS 26.3 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442 dyld\n\u2014 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 18 \u2014 iOS 18.7.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Apple 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 Lockdown Mode.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 23.09.2026.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: GTIG \u2014 The Proliferation of DarkSword\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2MAX", "creation_timestamp": "2026-09-27T09:02:44.000000Z"}]}