New iPhone spyware can steal passwords and photos

The discovery was first detailed in a Cyber Press brief titled 'Attackers Combine Coruna and DarkSword Into New DarkCoruna iOS Exploit Chain.' The combined code leverages vulnerabilities in the Enterprise iPhone platform, allowing malicious actors to bypass typical defenses and gain extensive control over the handset. Follow‑up coverage from iVerify outlined key takeaways of the Packet Protector analysis, emphasizing the role of the Enterprise iPhone firmware in the exploit. ForkLog reported that DarkSword has expanded its focus to crypto applications on iOS and demonstrated a Chrome compromise achieved in six days using GPT‑5.6 Sol, indicating rapid tool adaptation.

GBHackers added that exploit kits can infect iPhones via a single malicious website, amplifying the attack surface across consumer devices. Current reports, including Fox News, confirm that the new iPhone spyware can extract user passwords and photograph libraries, demonstrating active data‑theft capabilities. The exploit chain remains viable, with no public patches or mitigation guidance cited, and coverage does not yet specify any remediation steps from device manufacturers.

Analysts expect further updates as security firms develop detection signatures for the DarkCoruna components.