A message from the IT Security Office:
A new hacking tool called DarkSword is circulating online. It targets iPhones that are not fully updated and can compromise a device without any warning or user interaction.
We are asking all staff to update your iPhone as soon as possible to stay protected.
What makes this threat serious:
- DarkSword does not rely on phishing or tricking users.
- Users are not required to click a link, download an app or open an email.
- There are no warning or visible signs of infection.
- Simply visiting a compromised website, including legitimate websites that have been hacked, can be enough to trigger a full device takeover on an unpatched iPhone.
What attackers can access if a device is compromised:
Once infected, attackers may be able to steal sensitive personal data, including:
- Passwords and Apple Keychain data.
- Messages from iMessage, WhatsApp, Telegram, and email.
- Photos, location history, and health data.
- Cryptocurrency wallet credentials.
- iCloud content and browser history.
The fix is simple:
A software update fully protects your device from this vulnerability. Update your iPhone today by following these steps:
- Open Settings.
- Select General.
- Select Software Update.
- If prompted, select Update Now.
The update typically takes 5 minutes to complete. We recommend doing this while your phone is plugged in and connected to Wi Fi.
If you see “Your software is up to date”, no further action is needed.
Keeping devices up to date is one of the easiest and most effective ways to protect yourself and the organization.
Thank you for helping keep our systems secure.
ITS Security Office
[email protected]
