The "DarkSword" attack, which can spread malware to unpatched iPhones, is now targeting potential victims through phishing emails. Email security provider Proofpoint warned of the threat after detecting the emails in customers' inboxes. They feature a link that leads to a malicious site hosting DarkSword, which abuses a range of iOS software vulnerabilities to remotely attack iPhones running iOS 18.4 to 18.7. The phishing emails underscore the threat of DarkSword, an attack that was originally used by a handful of shadowy groups for cyberespionage and cybercrime. But last week, someone leaked the attack online, making it easy for anyone to adopt and potentially improve upon. Proofpoint suspects Russia’s Federal Security Service is behind the phishing emails, which pretend to come from the Atlantic Council, a US think tank, and invite the user to a “closed-door strategic discussion” about Europe’s security. Russian dissident Leonid Volkov reported receiving one of the phishing emai...