Truth Over Tradition.
OUTDATED DEVICES TARGETED IN ACTIVE HACKING CAMPAIGNS
Published March 21, 2026 9:46 AM EST
From the Technology Desk, Littleton Reporter
UNITED STATES — Apple is urging iPhone users to update their devices after cybersecurity researchers identified active hacking campaigns targeting phones running outdated software.
According to newly released findings, multiple threat actors—including state-linked groups and cybercriminal networks—have been exploiting vulnerabilities in older versions of Apple’s operating system to gain deep access to personal devices. Researchers have specifically linked some of these campaigns to actors associated with Russian intelligence as well as Chinese cybercriminal operations.
WHAT WE KNOW
Researchers identified at least two sophisticated exploit tools capable of infiltrating iPhones that have not installed recent updates. These tools have been identified by researchers as “DarkSword” and “Coruna,” and have been analyzed by multiple cybersecurity firms including Google, iVerify, and Lookout.
These tools allow attackers to access highly sensitive data, including:
- Text messages and call history
- Location tracking and browser history
- Wi-Fi credentials and SIM data
- Personal files such as notes, calendars, and health data
In technical assessments, one of the tools has been described as functioning as a full surveillance platform, capable of extracting large volumes of device data across multiple systems simultaneously.
In some cases, the attacks occur through compromised websites, where simply visiting a page can trigger the exploit without user interaction. Researchers note these campaigns rely on “watering hole” techniques that exploit how devices process web traffic to automatically infect vulnerable phones.
Security experts note that these attacks are difficult for users to detect and operate silently once a device is compromised. Researchers have emphasized that, in many cases, users would have no visible indication their device has been accessed.
WHY THIS MATTERS
While the identified campaigns have primarily targeted specific international groups, cybersecurity analysts emphasize that the underlying vulnerabilities are not geographically limited. Reported targets have included individuals in Ukraine, cryptocurrency users targeted through finance-related websites, and users in multiple countries across Europe, the Middle East, and Asia.
Any device running outdated software may be at risk. Researchers noted that although there is no confirmed evidence of widespread targeting of U.S. users, the same tools could be used against any vulnerable device.
Apple has confirmed that its latest operating system includes protections against these exploits and has taken the additional step of issuing security updates for older devices that cannot support full upgrades. The company recently released a targeted security patch specifically designed to block these exploit tools on unsupported devices.
The company states that keeping devices updated remains the most effective defense against these types of attacks, emphasizing that outdated software is the primary condition required for these exploits to succeed.
BROADER CYBERSECURITY CONTEXT
The warning comes amid a broader rise in mobile-targeted cyber activity:
- The FBI reports that cybercrime complaints in the United States exceeded 880,000 cases in recent annual reporting, with billions in reported losses
- Mobile devices are increasingly targeted due to the volume of personal, financial, and authentication data they contain
- “Watering hole” attacks—where legitimate or cloned websites are used to infect visitors—have become a growing tactic among advanced threat actors
Researchers also note that some of these exploit tools have changed hands between different actors, including movement from state-linked groups to criminal networks, increasing their potential use and spread.
Cybersecurity researchers warn that the barrier to executing large-scale mobile attacks is decreasing, making routine software updates a critical layer of defense. One researcher noted that widespread mobile exploitation is becoming more accessible and likely to grow in frequency.
WHAT USERS SHOULD DO
Security experts recommend the following:
- Install the latest available iOS update immediately
- Enable automatic updates where possible
- Avoid visiting unfamiliar or suspicious websites
- Keep apps and system software fully up to date
Even devices that appear to function normally may be vulnerable if not running current software. Experts emphasize that these attacks often leave no visible signs, making proactive updates essential.
BOTTOM LINE
The latest findings challenge the assumption that mobile devices are inherently secure.
Modern smartphones remain highly protected systems, but like any connected technology, they depend on regular updates to defend against evolving threats. Researchers caution that the perception of iPhones as immune to hacking does not hold when devices are running outdated software.
⎯⎯⎯⎯⎯
FROM THE TECHNOLOGY DESK
The Technology Desk covers cybersecurity, digital infrastructure, and emerging technologies that directly impact the North Country, its residents, businesses, and public systems. Reporting includes personal security and safety measures, such as privacy-focused browsers, end-to-end encrypted email and messaging platforms, and practical tools for protecting data.
Coverage is independent. Littleton Reporter has no affiliations with, and receives no compensation from, any products, services, or technologies referenced. The focus remains on clear, relevant, and actionable information for the public.
Truth Over Tradition.
© 2026 Littleton Reporter. All rights reserved. Sharing is welcome—reposting in full is not. For permission to republish or quote, please message us directly.
Sources: Apple, Google Threat Analysis Group, iVerify, Lookout, FBI Internet Crime Complaint Center (IC3), Citizen Lab
#LittletonReporter #Cybersecurity #iPhone #Apple #DataSecurity #Privacy #TechNews #PublicSafety #DigitalSecurity #UpdateYourPhone #CyberThreats
