Q: What is the DarkSword exploit and how does it attack iPhones? A: DarkSword is a chained browser and system exploit that can run the moment you open a malicious web page, with no taps, downloads, or approvals required. Security researchers say it targets some older unpatched iPhones and the payload attempts to exfiltrate credentials, Apple Notes, crypto wallet files and other sensitive data. Q: Which iPhones are vulnerable to the DarkSword chain? A: The exploit works against some older, unpatched iPhones and was disclosed publicly in March, after which Apple issued a patch later that month. If your device no longer receives updates you should be extra cautious and avoid using it for sensitive tasks like banking or crypto. Q: How can I protect iPhone from DarkSword exploit right now? A: To protect iPhone from DarkSword exploit, install the latest iOS update immediately, enable Automatic Updates (including Security Responses and System Files), and restart your device after updating. Also avoid unknown links, order through the Apple Store app or by typing apple.com directly, and harden Safari with Fraudulent Website Warning, block pop-ups, and a reputable content blocker. Q: I opened a suspicious preorder page — what immediate steps should I take? A: Enable Airplane Mode to try to stop any ongoing data exfiltration, update iOS immediately and restart, then change your Apple ID password and confirm two-factor authentication is enabled. Rotate passwords for your most sensitive accounts and, if you used a crypto wallet on the device, assume exposure and move funds to a new wallet with a fresh recovery phrase generated on a clean device or hardware wallet. Q: What types of data can the DarkSword payload try to steal? A: If it succeeds the payload can collect device identifiers, a list of installed apps, and the contents of Apple Notes, and it attempts to recover saved keychain credentials and wallet files from apps like MetaMask, Phantom, Trust Wallet, Coinbase Wallet, Exodus and Tonkeeper. It can also try to access messages, contacts, call history, voicemail, email, calendar entries, cached location data, and photo thumbnails. Q: Will updating iOS stop the DarkSword attack? A: Yes; Apple issued a patch after the exploit chain was disclosed in March, so installing the latest iOS update is the primary defense. Turning on Automatic Updates and Security Responses helps ensure you receive future fixes promptly. Q: Should I erase and restore my iPhone if I suspect it was compromised? A: If problems persist after updating and changing passwords, the article recommends backing up your iPhone, erasing all content and settings, and setting it up as new before restoring apps and data. After erasing, update iOS on the clean device first and only restore trusted content to reduce the chance of restoring compromised files. Q: How can families and small businesses reduce the risk of this kind of attack? A: Make safe defaults by enabling Automatic Updates on every device, teaching everyone to avoid unsolicited links and to type apple.com manually, and using Screen Time to block unknown sites for children. For small businesses, consider mobile device management to force updates, lock down Safari settings, and deploy reputable content blockers to help protect iPhone from DarkSword exploit.