🕵️ DarkSword

The items that name it 3

• Star Blizzard refines phishing and malware delivery with the RedFlick technique
  writeup2026-09-29
• Socket: FUNNULL iOS Spyware Campaign via 13 Malicious Packagist Themes
  writeup2026-09-01

  Publicly documented iOS exploit kit whose staging pattern and renderer CVEs overlap with the FUNNULL chain; named operators reported as Russian and Turkish (per GTIG-URL); the FUNNULL chain's kernel stage is a distinct fork/tenant variant

• Detecting and countering misuse of AI: September 2026
  articleIt is written here as DarkSword (iOS exploit chain, GTG-20006).

  iOS exploit chain, GTG-20006