According to Cointelegraph, security research group SlowMist has detected a malicious sample circulating that attempts to compromise iPhones running specific versions of iOS. The malware is designed to target the built-in Safari browser on devices operating within the 18.4 and 18.6.2 update range.
The technical analysis indicates this exploit relies on previously patched vulnerabilities, suggesting it may be attempting to bypass standard security measures found in current system configurations. Researchers note that while the sample functions as intended against these targeted versions, its ability to affect devices running iOS version 26.5 has not been verified and remains unknown.
No confirmed cryptocurrency theft linked directly to this specific attack chain has been reported by SlowMist at this time. The group continues monitoring the threat landscape while users are advised to stay vigilant regarding browser security settings on their mobile devices.
The presence of such samples highlights ongoing risks associated with web browsing environments, even after patches have theoretically neutralized known flaws in software architecture. Security professionals emphasize that attackers often seek out outdated or unpatched systems within large user populations where defenses may be weaker than expected.
