iVerify report details iPhone spyware targeting imToken wallet data
A report from security firm iVerify describes spyware able to issue remote commands on compromised iPhones to collect data linked to the imToken wallet app.
Security firm iVerify has published a report, titled P7 DarkSword, describing spyware that runs on compromised iPhones and issues remote commands aimed at data associated with the imToken cryptocurrency wallet.
The report's description indicates the tooling can extract that data on a recurring basis — roughly every 15 seconds after a device is compromised — suggesting ongoing collection rather than a single snapshot.
What the report describes
- Remote commands issued to an iPhone after it has been compromised
- Targeting of data tied to the imToken wallet application
- Repeated extraction at an interval of about 15 seconds
Mobile spyware aimed at cryptocurrency users has been a recurring subject of security research, since wallet-related data can give an attacker a direct path to funds. The summary of iVerify's findings does not specify which iOS versions are affected, how many devices may be involved, or whether the described collection has been observed in real-world attacks.