> TritonInfoSec News
Home / Aug 04, 2026 / Story
0
#7 The Hacker News general August 03, 2026 at 10:49 UTC

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

By [email protected] (The Hacker News)

AI Summary

An unidentified Chinese threat actor is operating over 100 fake AWS sign-in pages while deploying the GHOSTBLADE implant on Apple iOS devices using a publicly leaked version of the DarkSword exploit kit, as identified by Censys's attack surface management platform. The campaign targets iOS users through credential-phishing infrastructure combined with browser-based exploitation. The use of a leaked commercial exploit kit lowers the barrier to sophisticated iOS targeting and complicates attribution.

Read full article → https://thehackernews.com/2026/08/chinese-threat-a…

Relevance score: 79.0/100

# More from August 04

  1. 1
    Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts The Hacker News
  2. 2
    INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws The Hacker News
  3. 3
    N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete The Hacker News
  4. 4
    The OpenAI Hack Shows the Genie Is Out of the Bottle Schneier on Security
  5. 5
    Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts BleepingComputer
  6. 6
    Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen The Record
  7. 8
    ExfilSquad hackers leak info of over 100,000 UK police officers, staff BleepingComputer
  8. 9
    New DOUBLECUP ClickFix service hides malware in browser cache images BleepingComputer
  9. 10
    Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable The Hacker News