spotted a user with a Malaysian IP flexing their desktop. looks like they managed to gain elevated privileges using Coruna or DarkSword. Coruna targets iOS 13.0 to 17.2.1, while DarkSword targets iOS 18.4 to 18.7. Apple didn’t fully patch the latter until iOS 26.3. financially motivated hackers have deployed these exploits across a massive network of fake Chinese-language finance and crypto websites to steal iOS users’ crypto wallets. The scale is huge. please update to the latest iOS version (at least 18.7.7 or 26.3), enable Lockdown Mode, and NEVER store your seed phrase in Notes or Photos. If your iPhone gets compromised by one of these exploits, assume any hot wallet private keys on it are compromised.