iPhone users, this should seriously worry you. $4.06 MILLION in crypto theft has been uncovered from iPhones with one click of a link. The victim said they tapped an ad in Safari before wallet apps were emptied. An iOS exploit kit such as DarkSword is suspected. DarkSword chains together iOS security flaws to compromise vulnerable iPhones. Opening a malicious Safari page is enough to steal passwords, photos, Notes and wallet data. No wallet connection, signature, or approval needed. Other attacks reported in 2026: 1. Instagram ads - iPhone was infected while they scrolled past a malicious ad 2. Pegasus spyware - iPhone was infected without clicking a link or downloading a file. 3. P7 DarkSword - spyware capable of extracting passwords, photos, Notes and wallet data. 4. Fake Apple preorder pages - fake iPhone website launched an infection attempt simply when opened. 5. iMessage - A zero-click exploit infected an iPhone with spyware capable of accessing messages, microphone and camera. 6. Telegram downloads - modified iPhone apps collected location, device information and screenshots while open. 7. App Store malware - 2 apps carried SparkCat, which scanned photos for seed phrases after users granted access. 8. Coruna - 23 exploits used in espionage and financially motivated attacks against older iOS versions. _____ Now here's what you should do: • Update iOS and apps NOW. Enable automatic updates too. • Avoid unsolicited app downloads and configuration profiles. • Limit apps’ access to Photos, location, microphone and camera. • Keep seed phrases out of screenshots and Notes. • Consider Lockdown Mode if you face heightened spyware risks.