New iPhone spyware can steal passwords and photos

Researchers at mobile security firm iVerify found a more capable version of iPhone spyware, P7 DarkSword, while investigating an infected device. The discovery matters because the spyware can gather highly personal information and let attackers issue further commands remotely, although the report does not show that all iPhones are vulnerable.

The spyware can collect data directly from a compromised phone, scan its files and run JavaScript in its environment. iVerify says it can check for new instructions every 15 seconds, an interval attackers can change remotely. Apple said DarkSword began as costly mercenary spyware, but its technology became available to common criminals after it leaked.