{"id":242147,"date":"2026-08-04T01:19:21","date_gmt":"2026-08-04T06:19:21","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/08\/chinese-threat-actor-uses-leaked-darksword-kit-to-deploy-ghostblade-on-ios"},"modified":"2026-08-04T01:19:21","modified_gmt":"2026-08-04T06:19:21","slug":"chinese-threat-actor-uses-leaked-darksword-kit-to-deploy-ghostblade-on-ios","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/08\/chinese-threat-actor-uses-leaked-darksword-kit-to-deploy-ghostblade-on-ios","title":{"rendered":"Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/chinese-threat-actor-uses-leaked-darksword-kit-to-deploy-ghostblade-on-ios2.jpg\"><\/a><\/p>\n<p>An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the <strong>DarkSword<\/strong> exploit kit.<\/p>\n<p>Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on a domain that also hosts the exploit toolkit.<\/p>\n<p>\u201cThe hosting concentrates in Hong Kong but reaches into Japan, the United States, and Europe,\u201d Censys researcher Aidan Holland <a href=\"https:\/\/censys.com\/blog\/darkswords-panel-sprawl\/\" target=\"_blank\">said<\/a> in an analysis published on July 31, 2026.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-242147","post","type-post","status-publish","format-standard","hentry","category-futurism"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=242147"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242147\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=242147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=242147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=242147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}