Russian State Group TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Proofpoint has disclosed a targeted spear-phishing campaign conducted by TA446, a Russian state-sponsored threat group also known as Callisto, deploying the leaked DarkSword exploit kit against iOS devices. The campaign represents an escalation in mobile-targeted attacks by nation-state actors and highlights the growing threat posed by leaked commercial exploit kits being weaponized in state-sponsored operations. [Instagram] Proofpoint has uncovered a Russian state-sponsored campaign using the leaked DarkSword iOS exploit kit to target users through spear-phishing emails. The threat actor TA446, also known as Callisto, has been attributed with high confidence. iOS users in targeted organizations should be on alert. [LinkedIn] Proofpoint has disclosed a targeted spear-phishing campaign conducted by TA446, a Russian state-sponsored threat group also known as Callisto, deploying the leaked DarkSword exploit kit against iOS devices. The campaign represents an escalation in mobile-targeted attacks by nation-state actors and highlights the growing threat posed by leaked commercial exploit kits being weaponized in state-sponsored operations.