[SlowMist Releases Analysis of DarkSword Trojan Backend and iOS Attack Chain] SlowMist has released an analysis of the backend of the 'DarkSword' Trojan and its iOS attack chain. In March 2026, exploit code related to DarkSword was made public; by July of the same year, DarkSword-PROV2 appeared on GitHub; in late September, researchers discovered that its attack infrastructure had been put into actual operation. SlowMist tracked the attack infrastructure, linked its management backend to the public GitHub repository, and conducted an in-depth analysis of the exploit code, payload library, delivery chain, and various capabilities following a successful attack.