A new variant of the DarkSword iOS exploit kit, dubbed P7 DarkSword, has been discovered with enhanced capabilities. This version significantly reduces its on-device footprint, making it harder to detect. It now includes functionality for stealing keychain and cryptocurrency wallet data directly from iOS devices, alongside two-way command-and-control communication with attacker infrastructure. This evolution indicates a growing sophistication in mobile-specific threats targeting high-value assets like crypto wallets.