Mobile-security firm iVerify disclosed P7 DarkSword on October 8 after investigating an August infection. Its analysis describes a spyware variant with fewer visible traces and added capabilities to steal stored credentials and cryptocurrency-wallet data from compromised iPhones.

In October 8 reporting, 9to5Mac said iVerify also described distribution through malicious advertising. The malware can receive further instructions from attackers. This is analysis of a spyware variant, not an announcement of a newly discovered iOS vulnerability.

Neither account establishes a total number of affected users. The August infection, October 8 disclosure and this report's preparation are separate dates. The findings do not establish that every iPhone is compromised or that stolen wallet data always results in financial loss.