A zero-click iOS exploit kit called DarkSword has stolen $5.57 million in cryptocurrency from over 20 wallets, security researchers warned on November 6. The attack exploits a vulnerability in iOS 18 that triggers when users visit an infected website via Safari—no wallet connection or signature authorization required. Once activated, the malicious code runs silently in the background, harvesting passwords, photos, files, and crypto wallet private keys and seed phrases. At least 18 malicious websites have been identified as part of the campaign. Binance founder Changpeng Zhao urged users to update their iOS systems immediately, particularly those who have not patched recently. "No wallet software can update the operating system on your behalf," Zhao said, emphasizing that self-custody means self-responsibility for device-level security.