Cybersecurity experts warn that a dangerous iPhone vulnerability named DarkSword continues to be exploited, deploying Coruna malware to steal sensitive data and recovery phrases from cryptocurrency wallets such as Coinbase, MetaMask, and Trust Wallet. The malware can also scan infected devices for photos and notes to find BIP39 recovery phrases. Apple has fixed the DarkSword vulnerability in iOS 26.3, but older iPhone devices running iOS 26.2 and earlier versions may still be at risk if not updated promptly. Cryptocurrency holders are advised to ensure their device systems are up to date to mitigate the risk of attack.