SlowMist releases DarkSword Trojan backend and iOS attack chain analysis report

SlowMist releases DarkSword Trojan backend and iOS attack chain analysis. In March 2026, the exploit code related to DarkSword was made public; In July of the same year, DarkSword-PROV2 appeared on GitHub; In late September, researchers discovered that its attack infrastructure was put into actual operation. SlowMist tracks the attack infrastructure, associates its management backend with publicly available GitHub repositories, and analyzes the vulnerability exploitation code, load repositories, delivery chains, and various capabilities after the attack is successful.