{"vulnerability": "CVE-2025-43520", "sightings": [{"uuid": "50c640bc-c199-464a-a378-f97b9728aa05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7su7ucw2e", "content": "", "creation_timestamp": "2025-12-12T23:15:58.435216Z"}, {"uuid": "45de5bb9-d5fe-441b-9b0f-2ebe1dff0954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkaykwh2v", "content": "", "creation_timestamp": "2026-03-21T21:03:06.238906Z"}, {"uuid": "e9dd8744-8786-4d0b-9fdd-9960b9430851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-43520", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/650af838-d4bc-44ff-8222-7e59092205e5", "content": "", "creation_timestamp": "2026-03-20T16:00:10.421325Z"}, {"uuid": "88a04391-ad19-428d-9711-c560ba3af6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://bsky.app/profile/jjtech.infosec.exchange.ap.brid.gy/post/3mhspjljvqlt2", "content": "", "creation_timestamp": "2026-03-24T13:46:08.610261Z"}, {"uuid": "cfaf1491-6d09-4036-97f5-d19cf9248026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdarvj2q", "content": "", "creation_timestamp": "2026-03-19T21:02:59.187721Z"}, {"uuid": "dd1515f8-ff07-43c8-a12a-0b48cb001796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116262336964134871", "content": "", "creation_timestamp": "2026-03-20T16:01:16.467871Z"}, {"uuid": "17d8e390-eec1-472c-b335-60dd397e904d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6059879", "content": "", "creation_timestamp": "2026-03-20T16:06:58.661046Z"}, {"uuid": "dfe87924-8ef6-40d4-9625-2530f472b3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-03-20T12:00:00.000000Z"}, {"uuid": "f4b5f510-8a75-4a79-9861-6275a13b5c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://notnow.dev/objects/6fde97d1-0698-479a-9bf9-00138b2af6dd", "content": "", "creation_timestamp": "2026-03-19T01:31:22.464106Z"}, {"uuid": "b42fad26-c6e7-4759-b694-8c2062900f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-darksword-ios-flaws-exploited-attacks/", "content": "", "creation_timestamp": "2026-03-24T03:00:02.000000Z"}, {"uuid": "b9b2505b-3f6d-448c-bf38-1590b121e1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://notnow.dev/objects/18f251a1-97f6-48d9-8ffb-6461cec6c2d3", "content": "", "creation_timestamp": "2026-03-19T02:42:54.088937Z"}, {"uuid": "2fe382bc-596f-4d50-bf8c-9a5322920c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw2ejbcj22z", "content": "", "creation_timestamp": "2026-03-25T21:38:02.226671Z"}, {"uuid": "3657e154-cffc-4e71-aee7-32a036c9ad68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av25-722", "content": "", "creation_timestamp": "2026-03-20T18:07:07.000000Z"}, {"uuid": "b08585b6-4b27-4042-84ab-086af72f5bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://gist.github.com/pliku/689f5640442d9187a0e7f743078ac9fc", "content": "", "creation_timestamp": "2026-04-03T10:53:16.000000Z"}, {"uuid": "14953e6d-cdec-425f-942c-d4c6a6e5f420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "exploited", "source": "https://t.me/true_secator/8007", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "creation_timestamp": "2026-03-18T15:22:35.000000Z"}, {"uuid": "055bc9f1-1044-40ca-88c2-e863eb7094fd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f66b2894-887a-4298-81e7-e3917a3e9cd6", "content": "", "creation_timestamp": "2026-06-19T12:45:14.402514Z"}, {"uuid": "bb021be7-abf7-4f0b-a864-8d6643fb33b0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0c2918d-947e-4dff-824d-8d117630dff6", "content": "", "creation_timestamp": "2026-06-23T14:03:41.022719Z"}, {"uuid": "fd16400c-77d0-458d-9a51-794d27aad0c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/CQ8nQMs8BNL-Z7vaKvEGnVNaoqTlr5j0_QsaYmRYgkZ8EHg", "content": "", "creation_timestamp": "2026-09-13T15:00:05.789155Z"}, {"uuid": "70f8f6b7-2280-4d46-9ded-9eed513b6f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/AWkoFg767D37YJFVLP2hvpE2A336baTXU6v1_ymL6aj7Sw4", "content": "", "creation_timestamp": "2026-09-12T12:00:04.822051Z"}, {"uuid": "4313fef4-a0a5-4974-b394-6c14c485ed0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/TlZupgjduvIHJZ3L7vku4R_7_V5Bx_dgLPzGJ6X1oCSFC68", "content": "", "creation_timestamp": "2026-09-12T16:00:09.150920Z"}, {"uuid": "79dd9c56-600e-41a3-9d75-4f9932211b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "content": "", "creation_timestamp": "2026-09-12T22:00:05.656198Z"}, {"uuid": "1e499f92-a03a-45b6-a418-f3b4d54417e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "content": "", "creation_timestamp": "2026-09-13T00:00:06.068895Z"}, {"uuid": "6318feca-1712-43d5-bbfe-038b85e862df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/1KTvUTSi7Eydz2Zgvb3yvAULumVCOo3s8x855xBc1buEToQ", "content": "", "creation_timestamp": "2026-09-13T05:00:04.750595Z"}, {"uuid": "68f14724-f698-4879-83e9-9a7a2d63e00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/WSHZL1gDBP7KCGKK3R-W2HApOykqOxN1GVtZoP7qMGNNGi8", "content": "", "creation_timestamp": "2026-09-13T19:00:06.867544Z"}, {"uuid": "5284cb91-fe97-4f25-af73-42ecd8c8c40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/kwhEOs_lBjQ9GUnpMBML3K6wJJ9REMCRoPtFtKI4Qi_EvtM", "content": "", "creation_timestamp": "2026-09-13T22:00:08.428893Z"}, {"uuid": "862deb89-dc49-4ffc-a58e-c36d674aa233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/CQ8nQMs8BNL-Z7vaKvEGnVNaoqTlr5j0_QsaYmRYgkZ8EHg", "content": "", "creation_timestamp": "2026-09-14T00:00:12.453172Z"}, {"uuid": "be9c9485-09d0-44ac-b8f0-aaba19edbe2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/1KTvUTSi7Eydz2Zgvb3yvAULumVCOo3s8x855xBc1buEToQ", "content": "", "creation_timestamp": "2026-09-14T00:00:30.375255Z"}, {"uuid": "d24af3e0-030d-4a26-8dc5-9ef9a7902e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/u1WPiwlSFnvBBDng3MFr7wlITKXQpPT-BlqemGcsMOgMFrU", "content": "", "creation_timestamp": "2026-09-14T04:00:03.978467Z"}, {"uuid": "b3059589-4c7e-4ce8-8413-293578a67cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/UvYs8dujYL9SAEG4Ree92p6gHcxC2s2MVir1G_yY-ucY8Hw", "content": "", "creation_timestamp": "2026-09-14T15:00:04.005611Z"}, {"uuid": "857b3da4-0d1b-48e4-a151-f19b56095e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/wgjyJHTUQkU_Aup-7KRVbF84GozcxgQqhZAklKjh9W6ERzQ", "content": "", "creation_timestamp": "2026-09-14T20:00:06.008344Z"}, {"uuid": "992ecc8f-21ef-48ad-8b9e-6dec788f7218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/AGD5SDO8TDW5GITpulVmfN7JMEyBzHdTcVz94o3GRwTvP0o", "content": "", "creation_timestamp": "2026-09-14T22:00:04.991934Z"}, {"uuid": "7ec9b89f-870c-4af1-a79d-5906214550be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/AGD5SDO8TDW5GITpulVmfN7JMEyBzHdTcVz94o3GRwTvP0o", "content": "", "creation_timestamp": "2026-09-15T00:00:09.369577Z"}, {"uuid": "4dcb6ed1-f553-489c-b01f-6b09fb7f7b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/hSG9Wih2ME2PNQO2VEupdPEbIHG13WUV6vwzw59cm6Fnkro", "content": "", "creation_timestamp": "2026-09-15T07:00:05.641101Z"}, {"uuid": "52e6de87-6645-4a52-8cf4-d40b2b4aa42a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/12c7l4MsPCuEGNFPjxPaBcpiCFY7aJABo_RsxWIh1dEdtg8", "content": "", "creation_timestamp": "2026-09-15T14:00:06.559249Z"}, {"uuid": "5b9fd276-b26b-46d5-9b9c-c98f06f8b868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/0yY1wurwAZrB01Th5GWnoeUyGWABJWb321Ym_rmWLE9wQGM", "content": "", "creation_timestamp": "2026-09-15T17:00:04.466559Z"}, {"uuid": "fca0892c-a79d-4f69-b9d4-71d946b02079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/-jaw7shGWBAW0ZISjxwzBGEYa0PixEtj6vwjZFs2u4xGywg", "content": "", "creation_timestamp": "2026-09-15T23:00:05.943994Z"}, {"uuid": "ac8db186-db9d-41d2-85e5-13e8e3768011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/0yY1wurwAZrB01Th5GWnoeUyGWABJWb321Ym_rmWLE9wQGM", "content": "", "creation_timestamp": "2026-09-16T00:00:13.606584Z"}, {"uuid": "1008aba0-a093-43ec-ab71-67ec9ddb868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/12c7l4MsPCuEGNFPjxPaBcpiCFY7aJABo_RsxWIh1dEdtg8", "content": "", "creation_timestamp": "2026-09-16T00:00:12.990406Z"}, {"uuid": "d5f3da64-1b8d-4f0e-b459-04cc3b1eb021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/Ai9lIL90PujQpn_BPUeIJIk72oV_bEcQjGvQVX5tm5YZbUs", "content": "", "creation_timestamp": "2026-09-16T06:00:05.363320Z"}, {"uuid": "b94af34c-2aa4-43da-9eb1-ba0ab30500fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "Telegram/keniwS0SOR8XfUT7qi4M0GEQBlv0hazqNMMOgVgEkVrtQ8Y", "content": "", "creation_timestamp": "2026-09-25T09:10:24.000000Z"}, {"uuid": "e589b124-3d8f-4f30-877e-dae8fb113682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "Telegram/keniwS0SOR8XfUT7qi4M0GEQBlv0hazqNMMOgVgEkVrtQ8Y", "content": "", "creation_timestamp": "2026-09-25T09:10:24.000000Z"}, {"uuid": "c59ed080-25d4-42ac-b3e0-6ffc584be17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "seen", "source": "https://t.me/poxek/6348", "content": "DarkSword: full-chain \u0434\u043b\u044f iOS 18.4\u201318.7 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 Safari \u0434\u043e \u044f\u0434\u0440\u0430\n\nGoogle Threat Intelligence Group \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 Lookout \u0438 iVerify \u043e\u043f\u0438\u0441\u0430\u043b\u0430 DarkSword \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 spyware-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438 \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0435.\n\n\u0412\u0441\u0435 \u0441\u0442\u0430\u0434\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 JavaScript, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434 PPL/SPTM \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e native-\u043a\u043e\u0434\u0430 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d.\n\n \u0426\u0435\u043f\u043e\u0447\u043a\u0430\nRCE \u0432 WebContent \u0447\u0435\u0440\u0435\u0437 JavaScriptCore:\nCVE-2025-31277 (\u0434\u043e 18.6) \u0438\u043b\u0438 CVE-2025-43529 (18.6\u201318.7, GC-\u0431\u0430\u0433 \u0432 DFG JIT)\n\n\u0417\u0430\u0442\u0435\u043c user-mode PAC bypass \u0432 dyld \u2014 CVE-2026-20700.\n\n\u041f\u043e\u0431\u0435\u0433 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u2014 OOB \u0432 ANGLE \u0447\u0435\u0440\u0435\u0437 WebGL (CVE-2025-14174, sbx0_main.js).\n\n\u0418\u0437 GPU \u0432 mediaplaybackd \u2014 COW-\u0431\u0430\u0433 XNU (CVE-2025-43510, sbx1_main.js), \u043a\u0443\u0434\u0430 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u044f JavaScriptCore.\n\nLPE \u2014 race \u0432 VFS XNU (CVE-2025-43520, pe_main.js).\n\n \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430\n\u0421\u043a\u0440\u044b\u0442\u044b\u0439 iframe \u2192 frame.html \u2192 rce_loader.js, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 iOS \u0442\u044f\u043d\u0435\u0442 rce_worker_18.x.js.\n\u041a\u043b\u044e\u0447 uid \u0432 sessionStorage \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435.\n\n \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\nGHOSTKNIFE, GHOSTSABER, GHOSTBLADE:\n\u2014 iMessage\n\u2014 Telegram\n\u2014 WhatsApp\n\u2014 keychain\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 Wi-Fi\n\u2014 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438\n\u2014 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044f\n\n \u0414\u043b\u044f \u0444\u043e\u0440\u0435\u043d\u0437\u0438\u043a\u0438\nGHOSTKNIFE \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432:\n/tmp/./STORAGE/\n\u0438 \u0447\u0438\u0441\u0442\u0438\u0442 crash-\u043b\u043e\u0433\u0438:\nlet files = MyHelper.getContentsOfDir(\"/var/mobile/Library/Logs/CrashReporter/\");\n// \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438\nif(file.includes(\"mediaplaybackd\")  file.includes(\"SpringBoard\")  file.includes(\"com.apple.WebKit.\") || file.includes(\"panic-full-\"))\n  MyHelper.deleteFileAtPath(file);\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438.\nGHOSTBLADE \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0438\u0441\u0442\u0438\u0442 systemgroup.com.apple.osanalytics/DiagnosticReports/.\n\nIOC\nstatic.cdncounter[.]net \u2014 UNC6353, watering hole \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435\nsnapshare[.]chat \u2014 UNC6748\n\nYARA-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 IOC \u2014 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 GTIG.\n\n\u26a0\ufe0f \u0424\u0438\u043a\u0441\u044b\n23 \u043c\u0430\u0440\u0442\u0430 2026 poc \u0443\u0442\u0451\u043a \u043d\u0430 GitHub.\n\u0424\u0438\u043a\u0441\u044b:\n\u2014 iOS 26.3 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442 dyld\n\u2014 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 18 \u2014 iOS 18.7.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Apple 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 Lockdown Mode.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 23.09.2026.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: GTIG \u2014 The Proliferation of DarkSword\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2MAX", "creation_timestamp": "2026-09-27T09:02:44.000000Z"}, {"uuid": "2be6f2d9-1ea1-414d-ab9d-52e787ab64be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43520", "type": "published-proof-of-concept", "source": "https://t.me/poxek/6348", "content": "DarkSword: full-chain \u0434\u043b\u044f iOS 18.4\u201318.7 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 Safari \u0434\u043e \u044f\u0434\u0440\u0430\n\nGoogle Threat Intelligence Group \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 Lookout \u0438 iVerify \u043e\u043f\u0438\u0441\u0430\u043b\u0430 DarkSword \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 spyware-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438 \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0435.\n\n\u0412\u0441\u0435 \u0441\u0442\u0430\u0434\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 JavaScript, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434 PPL/SPTM \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e native-\u043a\u043e\u0434\u0430 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d.\n\n \u0426\u0435\u043f\u043e\u0447\u043a\u0430\nRCE \u0432 WebContent \u0447\u0435\u0440\u0435\u0437 JavaScriptCore:\nCVE-2025-31277 (\u0434\u043e 18.6) \u0438\u043b\u0438 CVE-2025-43529 (18.6\u201318.7, GC-\u0431\u0430\u0433 \u0432 DFG JIT)\n\n\u0417\u0430\u0442\u0435\u043c user-mode PAC bypass \u0432 dyld \u2014 CVE-2026-20700.\n\n\u041f\u043e\u0431\u0435\u0433 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u2014 OOB \u0432 ANGLE \u0447\u0435\u0440\u0435\u0437 WebGL (CVE-2025-14174, sbx0_main.js).\n\n\u0418\u0437 GPU \u0432 mediaplaybackd \u2014 COW-\u0431\u0430\u0433 XNU (CVE-2025-43510, sbx1_main.js), \u043a\u0443\u0434\u0430 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u044f JavaScriptCore.\n\nLPE \u2014 race \u0432 VFS XNU (CVE-2025-43520, pe_main.js).\n\n \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430\n\u0421\u043a\u0440\u044b\u0442\u044b\u0439 iframe \u2192 frame.html \u2192 rce_loader.js, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 iOS \u0442\u044f\u043d\u0435\u0442 rce_worker_18.x.js.\n\u041a\u043b\u044e\u0447 uid \u0432 sessionStorage \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435.\n\n \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\nGHOSTKNIFE, GHOSTSABER, GHOSTBLADE:\n\u2014 iMessage\n\u2014 Telegram\n\u2014 WhatsApp\n\u2014 keychain\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 Wi-Fi\n\u2014 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438\n\u2014 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044f\n\n \u0414\u043b\u044f \u0444\u043e\u0440\u0435\u043d\u0437\u0438\u043a\u0438\nGHOSTKNIFE \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432:\n/tmp/./STORAGE/\n\u0438 \u0447\u0438\u0441\u0442\u0438\u0442 crash-\u043b\u043e\u0433\u0438:\nlet files = MyHelper.getContentsOfDir(\"/var/mobile/Library/Logs/CrashReporter/\");\n// \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438\nif(file.includes(\"mediaplaybackd\")  file.includes(\"SpringBoard\")  file.includes(\"com.apple.WebKit.\") || file.includes(\"panic-full-\"))\n  MyHelper.deleteFileAtPath(file);\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438.\nGHOSTBLADE \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0438\u0441\u0442\u0438\u0442 systemgroup.com.apple.osanalytics/DiagnosticReports/.\n\nIOC\nstatic.cdncounter[.]net \u2014 UNC6353, watering hole \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435\nsnapshare[.]chat \u2014 UNC6748\n\nYARA-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 IOC \u2014 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 GTIG.\n\n\u26a0\ufe0f \u0424\u0438\u043a\u0441\u044b\n23 \u043c\u0430\u0440\u0442\u0430 2026 poc \u0443\u0442\u0451\u043a \u043d\u0430 GitHub.\n\u0424\u0438\u043a\u0441\u044b:\n\u2014 iOS 26.3 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442 dyld\n\u2014 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 18 \u2014 iOS 18.7.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Apple 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 Lockdown Mode.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 23.09.2026.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: GTIG \u2014 The Proliferation of DarkSword\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2MAX", "creation_timestamp": "2026-09-27T09:02:44.000000Z"}]}