Mobile malware warning from Ukrainian researchers includes iPhone exploit kit
Ukraine warns Russian-aligned hackers are infecting military and officials' iPhones and Android phones for espionage.
Ukraine's SSSCIP warned that Russian-aligned hackers are targeting Android and iOS phones used by military personnel and government officials for espionage and theft. The DarkSword exploit kit has been used in watering-hole attacks on compromised news and government sites to exploit Safari and iOS, steal data within minutes, and then remove itself; Lookout attributes related activity to UNC6353. Groups UAC-0244 and UAC-0263 distributed CamelSpy and BTMOB through decoy websites. CERT-UA recorded 3,137 cyber incidents in the first half of 2026, about 8 percent more than the prior six months.