Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

The Hacker News 3 August 2026, 13:49 EEST Security Domains Cloud

An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on a domain that also hosts the exploit toolkit. "

Read the full story on The Hacker News https://thehackernews.com/2026/08/chinese-threat-actor-uses-leaked.html

An expired domain or a forgotten certificate takes a site down just as effectively as an attack. At CrockyHost hosting renewals and SSL are handled for you.

Keep reading

LACMA data breach last year exposed social security and medical data BleepingComputer
Hackers abuse npm mirrors to host phishing redirect pages BleepingComputer
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes BleepingComputer
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches The Hacker News