Threat Intelligence

Advanced iPhone Hacking Tools Once Reserved for Spies Now Spreading to Cybercriminals

Dark Reading · 11 Aug 2026

Key Takeaway Keep iPhones and other mobile devices updated with the latest security patches immediately, as delaying updates leaves you exposed to exploit tools that are increasingly falling into criminal hands.

Security researchers have identified that advanced iPhone exploit chains, dubbed Coruna and DarkSword, are no longer confined to government-backed hacking operations. These tools, once considered the domain of well-resourced nation-state actors targeting high-value individuals, are now being adopted by organized cybercrime groups on a global scale.

This shift matters because exploit chains of this sophistication can bypass iPhone security protections that most users and businesses rely on, potentially exposing sensitive data, communications, and credentials without the victim's knowledge. As these tools move from elite state-sponsored circles into the wider criminal ecosystem, the pool of potential attackers—and potential targets—grows significantly.

For small and medium businesses, this trend is a reminder that mobile devices are increasingly attractive targets for serious cybercriminals, not just large corporations or political figures. Business owners and staff who use iPhones for work communications, banking, or accessing company systems should treat mobile security with the same seriousness as they do their laptops and networks.

iOS Security Mobile Threats Cybercrime Exploit Chains SMB Security

Summarised by CISO AI from Dark Reading. We link back to every original so you can read it yourself.