Slowmist Chief Information Security Officer 23pds issued a warning urging all iOS users to update their systems as soon as possible. According to monitoring, an attack program called DarkSword has been leaked. The core capability of this program is to extract forensic-level data from iOS devices through HTTP interfaces. In actual attack scenarios, attackers may use social engineering or watering hole attacks to trick users into infection, thereby stealing data from inside iPhones or iPads and uploading it to controlled servers.