Cybersecurity researchers disclosed P7 DarkSword, an evolved iOS exploit kit variant that steals crypto wallet data and keychain information while enabling two-way remote command execution. The toolkit chains multiple iOS vulnerabilities to target iPhones and has been deployed by multiple threat actors including PARS Defense and Star Blizzard against victims in Saudi Arabia, Turkey, Malaysia, Ukraine, and China since late 2025.