DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
DarkSword's Coruna malware uses iOS browser exploits to steal cryptocurrency wallet recovery phrases from iPhones.
72
Product
Exodus
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 22, 2026
- Last mentionedOct 8, 2026
Timeline
6 articles · newest firstSectopRAT Malware Hides in Legitimate Software to Steal Browser Credentials and Crypto Wallets
SectopRAT hides in tampered legitimate software and steals browser credentials and crypto wallets.
60
CLOSEDQUORUM, the malware that asks four AI models what to do next
Cisco Talos says CLOSEDQUORUM lets four commercial AI models vote on credential and wallet theft.
74
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
68
Researchers Find Malware That Uses AI Models Instead of Human Hackers for Control
Researchers find CLOSEDQUORUM, a Windows malware that uses commercial LLMs as an autonomous decision engine for post-compromise actions like credential theft.
65
New ClosedQuorum Windows malware uses AI for attack decisions
ClosedQuorum, a Go Windows implant, lets several LLMs choose post-compromise actions without a human operator.
62
Related CVEs
by mentionsAppears with
- MetaMaskproduct · 6
- Mistralai model · 4
- Firefoxproduct · 4
- Microsoft Edgeproduct · 4
- Qwenai model · 4
- DeepSeekai model · 4
- Cisco Talosorganization · 4
- ClosedQuorummalware · 4
- Googlevendor · 3
- Geminiai model · 3
- Discordproduct · 3
- Windowsproduct · 3
- Alibabavendor · 2
- DeepSeekvendor · 2
- Chromeproduct · 2
- Google Chromeproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.