[SlowMist: DarkSword Attack Program Leaked in the Wild, Older iOS Users' Cryptocurrency Wallets at Severe Risk] According to a report by Jinse Finance, on May 15, SlowMist's Cosine stated on social media that the high-risk iOS attack framework DarkSword has been publicly leaked on platforms like GitHub and is being used for large-scale data theft attacks targeting cryptocurrency wallet holders. This attack program targets devices running iOS versions 18.4 to 18.7, exploiting vulnerabilities in the Safari browser through malicious web pages to achieve remote code execution, thereby stealing users' sensitive data. Attackers use bait web pages such as fake adult live streams, Tron energy stations, and refund processes to launch attacks. If iPhone users running older iOS versions access such web pages via the Safari browser (even without closing the page), sensitive information like plaintext private keys and mnemonic phrases may be stolen by malicious JavaScript code when unlocking wallet apps later. This data is then transmitted in real-time through channels like Telegram bots.