SlowMist CISO: iOS Remote Control Tools Peddled on Underground Forums

TechFlow reports that on November 15, according to SlowMist CISO 23pds, an underground forum was selling a remote access tool allegedly supporting iOS 13 through 27.2, claiming it could gain device access via phishing links and extract crypto wallet data.

The tool claims to feature capabilities such as privilege escalation, persistence after reboot, data exfiltration, real-time monitoring, and remote control, targeting keychain contents, chat records, and files. 23pds expressed skepticism about its ability to support iOS 27.2 and its overall stability, speculating that it might be an upgraded version of Darksword, and advised users to update their systems promptly and maintain security awareness.