Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

The Hacker News 3 August 2026, 13:49 EEST Security Domains Cloud

An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on a domain that also hosts the exploit toolkit. "

Read the full story on The Hacker News https://thehackernews.com/2026/08/chinese-threat-actor-uses-leaked.html

An expired domain or a forgotten certificate takes a site down just as effectively as an attack. At CrockyHost hosting renewals and SSL are handled for you.

Keep reading

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps The Hacker News
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets The Hacker News
Clop created custom web shell for Windchill data theft attacks BleepingComputer
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 The Hacker News