iVerify Uncovers P7 DarkSword iPhone Spyware That Polls Hackers Every 15 Seconds

1 articles · Updated · Fox News · Oct 19

iVerify said the newly identified P7 DarkSword variant is a stealthier iPhone spyware strain that can steal keychain data, photos, Apple Notes and some crypto-wallet information from an infected device.
Every 15 seconds, the malware can check in with command-and-control servers for new instructions, while code injected into SpringBoard and reduced logging make it harder for investigators to analyze.
DarkSword has been tied to malicious ads, compromised websites and an iOS exploit chain, but iVerify said it has not confirmed that fully updated iPhones can be compromised by the P7 variant.
Apple said the underlying vulnerabilities were patched in 2025 and older devices received a March 2026 security update; iPhones running the latest available iOS 15 through iOS 27 updates are protected against known exploits.
The finding broadens concern that mercenary spyware leaked to criminals can still threaten users who delay updates, making current iOS patches and Lockdown Mode the main defenses.