Leaked iPhone Hacking Tools Put Millions at Risk

A powerful set of hacking tools has surfaced online, raising serious concerns for iPhone and iPad users worldwide. Security researchers warn that these tools—known as Coruna and DarkSword—could allow hackers to break into Apple devices and steal sensitive personal data.

While iPhones are generally considered more secure than most devices, this latest development shows that even Apple’s ecosystem isn’t immune to large-scale cyber threats.

What’s happening?

Researchers have identified ongoing cyberattacks targeting Apple users globally using these advanced toolkits. Coruna and DarkSword are capable of extracting private information like messages, browsing history, location data, and even cryptocurrency assets from infected devices.

Such widespread attacks on iPhones and iPads are rare. Over the past decade, similar incidents have mainly been limited to targeted surveillance campaigns, including attacks against Uyghur Muslims in China and activists in Hong Kong.

Now, with parts of these tools leaked online, the risk has expanded far beyond targeted groups.

Why DarkSword is especially dangerous

Coruna can exploit devices running iOS versions from 13 up to 17.2.1 (released in late 2023). But DarkSword is even more concerning—it reportedly targets newer systems, including iOS 18.4 and 18.7 released in 2025.

What makes DarkSword particularly alarming is that some of its code has been published on GitHub. This means even less-skilled attackers can potentially download and use it.

Experts describe the leaked toolkit as “plug-and-play,” making it easier than ever to launch attacks against users who haven’t updated their devices.

How these attacks work

These hacking methods are highly deceptive. In some cases, users don’t even need to click on suspicious links. Simply visiting a compromised website can be enough to trigger an attack.

Once inside, the tools exploit vulnerabilities in Apple’s operating system, giving hackers deep access to the device. From there, stolen data is quietly sent to servers controlled by attackers.

Where did these tools come from?

Parts of Coruna are believed to have originated from Trenchant, a cyber unit within U.S. defense contractor L3Harris. These tools were initially developed for government use but appear to have spread into the hands of foreign intelligence agencies and cybercriminal groups.

Security firm Kaspersky has linked some of Coruna’s exploits to “Operation Triangulation,” a sophisticated cyber campaign targeting Russian users.

The origins of DarkSword remain unclear, though it has already been used in attacks across countries including China, Malaysia, Turkey, Saudi Arabia, and Ukraine.

A familiar pattern

This isn’t the first time advanced cyber weapons have leaked. In 2017, a hacking tool developed by the U.S. National Security Agency was released online and later used in the devastating WannaCry ransomware attack, which impacted hundreds of thousands of computers worldwide.

Are you at risk?

If your iPhone or iPad is not updated, you could be vulnerable.

Apple says users running the latest versions of iOS are protected. Security experts strongly recommend updating to iOS 18.7.6 or iOS 26.3.1 to patch the known vulnerabilities.

However, nearly one-third of Apple users are still on older software. With over 2.5 billion active devices globally, that leaves hundreds of millions potentially exposed.

What can you do?

If you can’t update your device, Apple’s Lockdown Mode offers an extra layer of protection. Introduced in iOS 16, this feature is designed for high-risk individuals like journalists and activists, but anyone can enable it.

While not perfect, there’s currently no public evidence that Lockdown Mode has been successfully bypassed.

Bottom line

This leak highlights a growing problem: once powerful hacking tools escape into the wild, they can spread rapidly and be used by anyone. For everyday users, the best defense remains simple—keep your device updated and stay cautious online.

Also read : WhatsApp Adds AI Replies and Smart Chat Upgrades