Image Credentials: Image Title: New Hacking Tools ‘Coruna’ and ‘DarkSword’ Target Outdated iPhones Source: (sora.openai) Date: March 2026. Attribution: This image was created using AI-generated imagery (sora.openai) and does not depict a real-world scene.
By Julian Thorne | Open Chronicle Tech
Cybersecurity experts are sounding the alarm over the emergence of two potent new hacking tools, dubbed “Coruna” and “DarkSword,” which are reportedly circulating in underground forums. The tools are specifically designed to exploit vulnerabilities in outdated versions of Apple’s iOS, allowing bad actors to bypass security measures and exfiltrate sensitive user data.
According to technical reports surfacing this week, Coruna and DarkSword utilize a sophisticated chain of exploits to gain unauthorized access to iPhones that have not been updated to the latest security patches. Once a device is compromised, the tools can reportedly grant attackers access to encrypted messages, photos, location history, and even stored credentials.
iPhone Users Warning: Powerful New Hack Can Steal Your Data Without Clicks
A dangerous new wave of iPhone hacking is raising global alarm. Advanced spyware like Darksword and Coruna can infect devices simply by visiting compromised websites, no downloads needed. Millions of… pic.twitter.com/XC4p3B0epr
— Augadh (@AugadhBhudeva) March 23, 2026
The discovery of these tools highlights a growing “arms race” between mobile security developers and specialized exploit brokers. Security researchers note that while Apple frequently releases patches for known vulnerabilities, a significant percentage of the global user base remains on older versions of iOS, either due to older hardware limitations or a simple delay in installing updates, leaving millions of devices at risk.
Preliminary analysis suggests that the initial infection vector for these tools often involves “zero-click” or “one-click” methods, such as malicious links sent via messaging apps or compromised websites. Unlike traditional malware that requires a user to download and install a file, these advanced exploits can sometimes trigger execution simply by the device processing a malformed image or message.
Apple has historically moved quickly to “silent patch” vulnerabilities once they are identified in the wild, but the public circulation of Coruna and DarkSword indicates that the underlying exploits are now accessible to a broader range of cybercriminals beyond state-sponsored groups.
Law enforcement and digital rights organizations are urging iPhone users to verify that their devices are running the most recent version of iOS. For users with older devices that no longer support the latest operating system, experts recommend heightened caution when interacting with unknown links and considering an upgrade to hardware that continues to receive critical security support.