Lub lim tiam dhau los, Cov kws tshawb nrhiav kev ruaj ntseg tau nthuav tawm cov cuab yeej hacking siab heev hu ua “DarkSword” tau siv los tsom cov neeg siv iPhone. Tam sim no, ib qho tshiab version ntawm lub cuab yeej tau xau ntawm GitHub, ua rau muaj kev txhawj xeeb thoob plaws.
Cov kws tshawb fawb ceeb toom tias txhua tus neeg nyiag nkas tuaj yeem siv tau yooj yim siv lub cuab yeej los tsom rau cov neeg siv iPhone thiab iPad uas tsis tau hloov kho mus rau qhov tseeb iOS no 26 qhov system. Raws li Apple tus kheej cov ntaub ntawv, tus naj npawb ntawm cov khoom siv cuam tshuam tuaj yeem ncav cuag ntau pua lab.
“Qhov no phem. Cov cuab yeej no yog ib qho yooj yim heev rau repurpose,” Matthias Frielingsdorf hais, co-founder ntawm mobile ruaj ntseg tuam txhab iVerify. “Cov neeg ua txhaum cai yuav pib siv nws sai sai.”
Nws tau sau tseg tias cov ntaub ntawv tawm tsuas yog HTML thiab JavaScript xwb, uas leej twg tuaj yeem xa tawm hauv feeb. Google pab neeg ruaj ntseg pom zoo nrog qhov kev ntsuas no. One security hobbyist said he had already used a sample circulating online to hack into an iPad running iOS 18.
Apple spokesperson Sarah O’Rourke said the company is aware of the vulnerability and issued an emergency patch on March 11 for devices unable to update to the latest system. “Keeping your software up to date is the most important thing you can do to stay secure,” she said, adding that updated devices and those with Lockdown Mode enabled are not affected.
The leaked code contains detailed comments describing how to steal sensitive information from target devices—including contacts, lus, call history, and Wi-Fi passwords—and send it to servers controlled by attackers. The code also references uploading data to a Ukrainian website, though the reason remains unclear.
Raws li kev txheeb xyuas los ntawm ntau lub tuam txhab kev ruaj ntseg, “DarkSword” tshwj xeeb yog tsom rau cov khoom siv khiav iOS 18 thiab ua ntej versions. Apple cov ntaub ntawv qhia tau hais tias kwv yees li ib feem peb ntawm cov neeg siv tseem nyob ntawm cov txheej txheem qub no, uas-muab muaj ntau tshaj 2.5 billion active devices - txhais tau tias ntau pua lab tus neeg siv tseem muaj kev pheej hmoo.
Cov kws tshawb fawb pom zoo kom txhua tus neeg siv iPhone hloov kho lawv cov kev ua haujlwm sai li sai tau los tiv thaiv kev tawm tsam.