DarkSword is the name Google Threat Intelligence Group (GTIG) uses for an iOS exploit chain: a sequence of software flaws that lets an attacker take control of an iPhone or iPad running iOS 18.4 through 18.7. It is not a single app you can find on a phone. After the exploit gets in, separate payload programs do the spying. Running an affected version does not mean a device was infected. For most owners the practical answer is to install the latest update their model offers, and if that is not possible, to turn on Lockdown Mode. The dates below come from GTIG’s March 18, 2026 report, Apple’s March and April 2026 security notes, and iVerify’s March 18, 2026 announcement, so check Apple’s security releases for anything newer.
What DarkSword is
GTIG published its account on March 18, 2026. It says it found a new full-chain iOS exploit that combines multiple zero-day vulnerabilities, meaning flaws unknown to the vendor when they were used, to fully compromise a device. GTIG inferred the name “DarkSword” from toolmarks, which are identifiable traces left in recovered payloads.
As an Amazon Associate I earn from qualifying purchases.
Google’s report uses “DarkSword” alone. Some headlines add a “P7” prefix, but that label does not appear in GTIG’s account, and nothing in the coverage cited here explains it.
Free tools Windows power users keep installed
One-click scans. No signup required.
Exploit chain versus payloads
Two layers are involved, and confusing them is the most common error in coverage of this story.
#1 Best Overall
- [2 Pack] This product includes 2 pack privacy screen protectors.WORKS FOR iPhone 17e/16e/14/iPhone 13/13 Pro 6.1 Inch tempered glass screen protector.Featuring maximum protection from scratches, scrapes, and bumps.[Not for iPhone 16 6.1 inch, iPhone 13 mini 5.4 inch, iPhone 13 Pro Max/iPhone 14 Pro Max/iPhone 14 Plus 6.7 inch, iPhone 14 Pro 6.1 inch]
- Specialty: to enhance compatibility with most cases, the Tempered glass does not cover the entire screen. HD ultra-clear rounded glass for iPhone 17e/16e/14/iPhone 13/13 Pro is 99.99% touch-screen accurate.
- 99.99% High-definition clear hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints.
- High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
- Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.
- The exploit chain is how an attacker gets in. GTIG says DarkSword uses six vulnerabilities to run code on the device and deploy final-stage payloads. Lookout describes exploitation through flaws involving Safari and WebKit, the browser engine iOS uses to render web content.
- The payloads are what runs after entry. GTIG names three distinct families: GHOSTBLADE, GHOSTKNIFE, and GHOSTSABER. They have different capabilities, so a statement about one does not automatically describe the others.
In the documented watering-hole cases, the chain was delivered through web content, so a visit to a site set up to exploit visitors was the entry point.
Where it has been observed
GTIG reports campaigns since at least November 2025 in Saudi Arabia, Turkey, Malaysia, and Ukraine. The campaigns involved commercial surveillance vendors and suspected state-sponsored actors. The attribution is the researchers’ assessment, and the table shows how GTIG frames each case.
| Country | Activity GTIG describes | Attribution as GTIG frames it |
|---|---|---|
| Saudi Arabia | A Snapchat-themed website used against Saudi Arabian users | Used by UNC6748 |
| Turkey and Malaysia | Activity associated with PARS Defense, a Turkish commercial surveillance vendor | Association assessed by GTIG |
| Ukraine | Watering-hole campaigns | Associated with UNC6353, a suspected espionage group |
These are GTIG’s assessments. They do not show that all DarkSword use was government-directed, and they do not show that every user in those countries was a target.
Rank #2
- [3 Pack] This product includes 3 pack privacy screen protectors.WORKS FOR iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch tempered glass screen protector. Due to the rounded edge design of the iPhone 16/iPhone 15/iPhone 15 Pro and to enhance compatibility with most cases,the tempered glass screen protectors will be slightly smaller than the phone screen.[Not for iPhone 16e 6.1 inch, iPhone 15 Plus/iPhone 15 Pro Max/iPhone 16 Plus 6.7 inch,iPhone 16 Pro 6.3 inch,iPhone 16 Pro Max 6.9 inch]
- Specialty: HD rounded glass for iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch is 99.99% touch-screen accurate.
- 99.99% High-definition hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints. Featuring maximum protection from scratches, scrapes, and bumps.
- High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
- Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.
What the payloads could access
Lookout’s analysis describes payloads that collect:
- Messages and credentials: SMS and iMessage, WhatsApp and Telegram, email, and saved credentials
- Files and accounts: iCloud files, notes, photos, and cryptocurrency wallets
- Device intelligence: Wi-Fi credentials, location history, and call logs
Lookout describes a “hit-and-run” design that aims to minimize dwell time, meaning how long the attacker remains on the device. These lists describe what the payloads were reported to take. They are not a guaranteed inventory from every compromise.
Rank #3
- Perfect Fit for iPhone 17 Pro Max：Engineered exclusively for iPhone 17 Pro Max with seamless edge-to-edge coverage, ensuring precise alignment and reliable full-screen protection.
- Advanced Privacy Protection：Features a 28° privacy filter with smooth 2.5D curved edges, preventing side glances in public. Your screen remains visible only to you—ideal for commuting, traveling, and crowded environments.
- Effortless Installation：Equipped with an auto dust-elimination tool that delivers a fast, accurate, and bubble-free application, keeping your screen perfectly clear with minimal effort.
- Military-Grade Protection：Made of nano-reinforced 9H tempered glass, SGS certified. Provides 5X stronger scratch resistance and proven durability, withstanding thousands of pressure and impact tests.
- Smudge & Fingerprint Resistant：Hydrophobic and oleophobic coating repels fingerprints, sweat, and oil—ensuring your screen stays clean, clear, and smooth to the touch.
iVerify’s March 18, 2026 announcement characterizes the Ukraine campaign as surveillance and intelligence gathering. It lists Wi-Fi passwords, messages, call history, location history, browser history, SIM and cellular information, health data, notes, calendar data, and crypto-wallet searches. These are iVerify’s observations. Because the payload families differ, a given victim may have had only some of this data taken.
How many devices are involved
In its March 18, 2026 announcement, iVerify said iOS 18.4 through 18.6.2 were “still running on up to 270 million devices.” That figure estimates devices running those versions. It is not a count of confirmed infections, and public reporting does not establish how many people have been compromised.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #4
- 【Industry-Leading 100% Anti-Spy Privacy Protection】Designed for iPhone 17 Pro. Larger iPhone screens are easier for others to glance at, so UltraGlass uses patented, SEGI-certified 25° Blackout-3 optical technology to help block side views and keep emails, banking apps, and private content visible only to you—while keeping the front view HD-clear and comfortable through hours of scrolling and streaming.
- 【Unbreakable TOP 9H+ Glass, the Excellent 2nd Screen for Your iPhone】Boasting unparalleled shatter resistance and durability. And the core excellence is the top 9H+ tempered glass material, which is widely applied in aerospace and military fields for its ① Shatter-proof ② Scratch & Wear Resistance ③ Durability that is 7-8 times higher than other materials. Thus, UltraGlass builds a second tough screen for your iPhone 17 Pro.
- 【Industry NO.1 Military-Grade Shatterproof】Authorized by the International Military Standard with 50+ rigorous engineering tests of 220 lbs impact, 8,000+ drop tests, 20,000+ scratch tests, etc., its strength, toughness and durability perform NO.1 among all glass. By especially breaking the industry's record with a 12ft drop, the iPhone 17 Pro screen protector is ensured to be unbreakable from its surface to every edge and corner!
- 【Invisible Armor, 1:1 Full Covers the iPhone's Screen】Mimicking the iPhone's original screen design, it uses a 1:1 3D curved reinforced black edge that wraps around every curve — case friendly — while securing even the most vulnerable edges. Seamlessly blending with the iPhone 17 Pro screen, it's virtually invisible and feels like the original screen while offering enhanced full-screen protection!
- 【0 Bubbles + 0 Dust + 0 Misaligned =100% Successful Installation】Includes everything you need with pioneering automatic positioning, dust removal, and absorption technology, making the installation just effortlessly easy in seconds. No bubbles, no troubles—transforming beginners into experts.
What to install and when
Apple released iOS 18.7.7 and iPadOS 18.7.7 on March 24, 2026. On April 1, 2026, Apple added availability for more devices and said automatic updates could deliver protections against web attacks it calls DarkSword. Its security page lists iPhone XR and later model families through iPhone 16, selected iPad models, and certain configurations, so check it against your exact model. Apple’s security page also explains why details arrive late: “For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available.”
GTIG reports that all six vulnerabilities in its account were fixed by iOS 26.3, and most were fixed earlier. Whether your device has a given fix depends on its model and the update it can install, not on the version number alone.
Best Value
- 【Innovative 1-Step Installation! 】Simplify the application process! Featuring automatic alignment functionality, enjoy a quick and easy installation,swiftly eliminate air bubbles, providing you a hassle-free installation experience for the iPhone 16 Pro Max privacy screen protector.Friendly Reminder: Please watch the installation video before you begin.
- 【Indestructible Ultra 9H Glass for Ultimate Protection】With nearly diamond-like 9H hardness, this privacy screen protector for iPhone 16 Pro Max effectively avoids shattering, cracking, and scratches. It is up to 4X stronger than traditional tempered glass protectors and reliably protects the entire phone screen from compression and other impacts.
- 【Ultra-Clear and Ultra-Sensitive】This protective film covers the iPhone 16 Pro Max 6.9-inch, ensuring you feel as if there's nothing on your iPhone screen.The high-quality anti-fingerprint surface keeps your screen clean, bubble-free, delivering the most natural viewing and sensitive touch for videos and gaming.
- 【26° Anti-Spy Privacy Protection】Featuring upgraded micro-louver optical technology, this iPhone 16 Pro Max privacy screen protector delivers a precise 26° privacy viewing angle. It maintains ultra HD clarity from the front view, while instantly darkening the screen for anyone viewing from the sides or behind.
- 【Professional After-Sales Support】Each package contains 4 privacy screen protectors for the 6.9-inch iPhone 16 Pro Max. We also offer a 365-day warranty service. We provide free replacement support for installation failures caused by product defects, size mismatch, or other verified quality issues. Please feel free to contact our customer support team for assistance.
If your iPhone or iPad can update
- Open Settings and tap General, then Software Update.
- If an update is listed, follow the prompt to download and install it. Enter your passcode if asked and keep the device connected until the process finishes.
- Restart if prompted. Then return to Settings > General > Software Update and confirm the device reports that it is up to date.
If the device cannot install a fix
GTIG recommends Lockdown Mode for enhanced security when an update is not possible. Lockdown Mode is a risk-reduction setting, not a patch. It does not replace an available update, and avoiding suspicious links is not adequate protection on its own.
- Open Settings and tap Privacy & Security.
- Scroll down and tap Lockdown Mode.
- Tap Turn On Lockdown Mode, confirm, and restart the device when prompted.
Lockdown Mode restricts some features and some web technologies. Read Apple’s description of those trade-offs before enabling it on a device you depend on for work or daily use.
If you suspect your iPhone is compromised
Public reporting does not provide a reliable self-check for DarkSword. A device that looks normal does not prove it is clean, and no scan or manual check has been shown to rule infection out. Generic consumer antivirus claims are not evidence either way. If you have concrete reasons to suspect compromise, such as unexplained activity in your messages or cloud accounts, install the available update first and then contact a qualified incident-response professional or your platform’s current security support channel.
Quick Recap
What does not help
- Cases, screen protectors, hardware security keys, and printed security guides are not documented protections against this exploit. The fixes are software updates and the Lockdown Mode setting.
- This evidence alone does not justify buying a new phone. Whether a device is covered depends on its model and the update it can install.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
