Apple is urging users to update their iPhones after the discovery of new spyware that can take over phones running older versions of the iOS operating system.
The powerful software exploit can steal information from potentially hundreds of millions of users, said cybersecurity researchers at Lookout, iVerify, and Alphabet’s Google.
It is unclear how many iPhones are vulnerable to the spyware known as Darksword, a type of malware designed to secretly steal information from mobile devices.
It affects users running an older version of the iOS operating system, released between March and August 2025 (versions 18.4 to 18.6.2).
An estimated 220 to 270 million iPhones still run on older iOS versions, according to researchers.
Analysis from the three companies shows the iPhone hacking tools have been focused on several groups: Ukrainians targeted by Russian intelligence; Chinese cryptocurrency users; and people in Saudi Arabia, Turkey and Malaysia.
On 3 March, Google and iVerify revealed details of a separate powerful iPhone spyware tool called Coruna, which was linked to Russian intelligence groups and Chinese cybercriminals.
Darksword was found on the same servers that suspected Russian operators of Coruna have used.
Researchers said the two hacking tools indicate a flourishing market for malware. Darksword can steal data, including emails, usernames, passwords, photos, and even cryptocurrency wallets.
Lookout described it as “highly sophisticated” malware, which “appears to be a professionally designed platform”.
An Apple spokesperson, Sarah O’Rourke, said the two tools only work against devices running older versions of Apple’s operating system, reinforcing the need for people to apply updates regularly.
“Keeping software up to date remains the single most important thing users can do to maintain the high security of their Apple devices,” she said.
Read more from Sky News:
Foreign Office has been hacked
Increase in teen cyber hackers
M&S cyber attack: Tech chief quits
John Scott-Railton, a senior researcher at Citizen Lab, a University of Toronto-sponsored cybersecurity lab, told NBC News: “The barrier to entry for widespread, devastating mobile attacks has been decisively lowered… it’s clear this problem is only going to grow.”
“The scary takeaway for regular users is they can’t spot this attack,” he added.
Apple’s latest operating system, iOS 26, was released in September and protects users against both hacking campaigns, according to the company.
Last week, Apple made the unusual move of releasing a special update for iPhone users with older devices that cannot handle a full upgrade to iOS 26, specifically to block hackers from using the hacking tools.
