SlowMist said DarkSword may put locally stored cryptocurrency wallet data on iPhones and iPads at risk by using iOS flaws to reach information beyond an infected app.
The firm said the malware exploits weaknesses in iOS to escape an app's isolated environment, which restricts an app from reaching information held elsewhere on a device. The warning identifies passwords and other credentials in Apple's Keychain, notes and local files holding wallet private keys as possible targets.
Apps users already have installed may be compromised, SlowMist said. The firm identified cryptocurrency users as targets and described stealing their cryptocurrency as the malware's objective. The warning also covers iPads.
SlowMist's Cosine advised people using either device to install an iOS update promptly.
EconoTimes previously covered code analysis of DarkSword-PROV2 paths across two iOS ranges.
