New iPhone spyware can steal passwords and photos

Researchers at iVerify identified P7 DarkSword, a more capable variant of iPhone spyware, while investigating a suspicious infection. Its discovery matters because it can collect sensitive data and let attackers remotely direct further activity on a compromised device.

The researchers reported that the spyware can scan files and run JavaScript in its environment; it may check for new instructions every 15 seconds, an interval attackers can change. The report describes what the code can do, but does not show that every iPhone is vulnerable or that all listed data was stolen. Apple said DarkSword began as costly mercenary spyware before its leak made the technology available to criminals.