{"metadata": {"vulnerability": "CVE-2025-43520", "count": 90, "kinds": {"milestone": 6, "sighting": 45, "kev": 11, "other": 28}}, "data": [{"timestamp": "2025-04-16T15:27:21.196Z", "date_only": false, "value": "2025-04-16T15:27:21.196Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-43520", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "vulnerabilities.57.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "vulnerabilities.113.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-11-04T23:00:00Z", "date_only": false, "value": "2025-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-11-04T23:00:00Z", "date_only": false, "value": "2025-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-11-13T23:00:00Z", "date_only": false, "value": "2025-11-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-11-13T23:00:00Z", "date_only": false, "value": "2025-11-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-12-12T20:56:25.542Z", "date_only": false, "value": "2025-12-12T20:56:25.542Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-43520", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-12T21:15:56Z", "date_only": false, "value": "2025-12-12T21:15:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C46J-8P94-C85X", "record": "GHSA-C46J-8P94-C85X", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-12-12T21:15:56.830Z", "date_only": false, "value": "2025-12-12T21:15:56.830", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-43520", "record": "FKIE_CVE-2025-43520", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-12-12T21:31:39Z", "date_only": false, "value": "2025-12-12T21:31:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C46J-8P94-C85X", "record": "GHSA-C46J-8P94-C85X", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-12-12T23:15:58.435Z", "date_only": false, "value": "2025-12-12T23:15:58.435216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7su7ucw2e", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "50c640bc-c199-464a-a378-f97b9728aa05", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7su7ucw2e"}, {"timestamp": "2025-12-14T23:00:00Z", "date_only": false, "value": "2025-12-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-02-02T23:00:00Z", "date_only": false, "value": "2026-02-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-02-02T23:00:00Z", "date_only": false, "value": "2026-02-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-03-18T15:22:35Z", "date_only": false, "value": "2026-03-18T15:22:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8007", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "14953e6d-cdec-425f-942c-d4c6a6e5f420", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "url": "https://t.me/true_secator/8007", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-19T01:31:22.464Z", "date_only": false, "value": "2026-03-19T01:31:22.464106Z", "kind": "sighting", "label": "Seen", "source": "https://notnow.dev/objects/6fde97d1-0698-479a-9bf9-00138b2af6dd", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "f4b5f510-8a75-4a79-9861-6275a13b5c1b", "url": "https://notnow.dev/objects/6fde97d1-0698-479a-9bf9-00138b2af6dd"}, {"timestamp": "2026-03-19T02:42:54.088Z", "date_only": false, "value": "2026-03-19T02:42:54.088937Z", "kind": "sighting", "label": "Seen", "source": "https://notnow.dev/objects/18f251a1-97f6-48d9-8ffb-6461cec6c2d3", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "b9b2505b-3f6d-448c-bf38-1590b121e1eb", "url": "https://notnow.dev/objects/18f251a1-97f6-48d9-8ffb-6461cec6c2d3"}, {"timestamp": "2026-03-19T21:02:59.187Z", "date_only": false, "value": "2026-03-19T21:02:59.187721Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdarvj2q", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "cfaf1491-6d09-4036-97f5-d19cf9248026", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdarvj2q"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-43520", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "650af838-d4bc-44ff-8222-7e59092205e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": true, "value": "2026-03-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-43520", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": true, "value": "2026-03-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-43520", "field": "evidence.0.details.date_added", "uuid": "650af838-d4bc-44ff-8222-7e59092205e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-43520", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "650af838-d4bc-44ff-8222-7e59092205e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-43520", "field": "status.status_updated_at", "uuid": "650af838-d4bc-44ff-8222-7e59092205e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T12:00:00Z", "date_only": false, "value": "2026-03-20T12:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "dfe87924-8ef6-40d4-9625-2530f472b3fd", "url": "https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog"}, {"timestamp": "2026-03-20T16:00:10.421Z", "date_only": false, "value": "2026-03-20T16:00:10.421325Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/650af838-d4bc-44ff-8222-7e59092205e5", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "e9dd8744-8786-4d0b-9fdd-9960b9430851", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/650af838-d4bc-44ff-8222-7e59092205e5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-20T16:01:16.467Z", "date_only": false, "value": "2026-03-20T16:01:16.467871Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116262336964134871", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "dd1515f8-ff07-43c8-a12a-0b48cb001796", "url": "https://infosec.exchange/users/AAKL/statuses/116262336964134871"}, {"timestamp": "2026-03-20T16:06:58.661Z", "date_only": false, "value": "2026-03-20T16:06:58.661046Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6059879", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "17d8e390-eec1-472c-b335-60dd397e904d", "url": "https://feedsin.space/feed/CISAKevBot/items/6059879"}, {"timestamp": "2026-03-20T18:07:07Z", "date_only": false, "value": "2026-03-20T18:07:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av25-722", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "3657e154-cffc-4e71-aee7-32a036c9ad68", "url": "https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av25-722"}, {"timestamp": "2026-03-20T18:31:15Z", "date_only": false, "value": "2026-03-20T18:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C46J-8P94-C85X", "record": "GHSA-C46J-8P94-C85X", "field": "modified", "linked_record": true}, {"timestamp": "2026-03-21T04:01:02.724Z", "date_only": false, "value": "2026-03-21T04:01:02.724402Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-43520", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-03-21T04:01:02.724Z", "date_only": false, "value": "2026-03-21T04:01:02.724402Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-43520", "record": "FKIE_CVE-2025-43520", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-03-21T21:03:06.238Z", "date_only": false, "value": "2026-03-21T21:03:06.238906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkaykwh2v", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "45de5bb9-d5fe-441b-9b0f-2ebe1dff0954", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkaykwh2v"}, {"timestamp": "2026-03-22T23:00:00Z", "date_only": false, "value": "2026-03-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-03-22T23:00:00Z", "date_only": false, "value": "2026-03-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-03-22T23:00:00Z", "date_only": false, "value": "2026-03-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-03-23T11:21:02.971Z", "date_only": false, "value": "2026-03-23T11:21:02.971+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-03-24T03:00:02Z", "date_only": false, "value": "2026-03-24T03:00:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-darksword-ios-flaws-exploited-attacks/", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "b42fad26-c6e7-4759-b694-8c2062900f66", "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-darksword-ios-flaws-exploited-attacks/"}, {"timestamp": "2026-03-24T13:46:08.610Z", "date_only": false, "value": "2026-03-24T13:46:08.610261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jjtech.infosec.exchange.ap.brid.gy/post/3mhspjljvqlt2", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "88a04391-ad19-428d-9711-c560ba3af6be", "url": "https://bsky.app/profile/jjtech.infosec.exchange.ap.brid.gy/post/3mhspjljvqlt2"}, {"timestamp": "2026-03-25T21:38:02.226Z", "date_only": false, "value": "2026-03-25T21:38:02.226671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw2ejbcj22z", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "2fe382bc-596f-4d50-bf8c-9a5322920c3b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw2ejbcj22z"}, {"timestamp": "2026-04-02T18:11:45.764Z", "date_only": false, "value": "2026-04-02T18:11:45.764Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2025-43520", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": true, "value": "2026-04-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-43520", "field": "evidence.0.details.due_date", "uuid": "650af838-d4bc-44ff-8222-7e59092205e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-03T10:53:16Z", "date_only": false, "value": "2026-04-03T10:53:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/pliku/689f5640442d9187a0e7f743078ac9fc", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "b08585b6-4b27-4042-84ab-086af72f5bcd", "url": "https://gist.github.com/pliku/689f5640442d9187a0e7f743078ac9fc"}, {"timestamp": "2026-06-01T12:25:49Z", "date_only": false, "value": "2026-06-01T12:25:49+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-43520", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f0c2918d-947e-4dff-824d-8d117630dff6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T12:25:49Z", "date_only": false, "value": "2026-06-01T12:25:49+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-43520", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f0c2918d-947e-4dff-824d-8d117630dff6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T12:25:49Z", "date_only": false, "value": "2026-06-01T12:25:49+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-43520", "field": "status.status_updated_at", "uuid": "f0c2918d-947e-4dff-824d-8d117630dff6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T12:25:49.913Z", "date_only": false, "value": "2026-06-01T12:25:49.913Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-43520", "field": "evidence.0.details.added_date", "uuid": "f0c2918d-947e-4dff-824d-8d117630dff6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T22:00:00Z", "date_only": false, "value": "2026-06-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2026-06-11T22:00:00Z", "date_only": false, "value": "2026-06-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2026-06-11T22:00:00Z", "date_only": false, "value": "2026-06-11T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-12T05:45:58.617Z", "date_only": false, "value": "2026-06-12T05:45:58.617+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2475", "record": "WID-SEC-W-2025-2475", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-19T12:45:14.402Z", "date_only": false, "value": "2026-06-19T12:45:14.402514Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f66b2894-887a-4298-81e7-e3917a3e9cd6", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "055bc9f1-1044-40ca-88c2-e863eb7094fd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f66b2894-887a-4298-81e7-e3917a3e9cd6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-43520", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f0c2918d-947e-4dff-824d-8d117630dff6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:41.022Z", "date_only": false, "value": "2026-06-23T14:03:41.022719Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0c2918d-947e-4dff-824d-8d117630dff6", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "bb021be7-abf7-4f0b-a864-8d6643fb33b0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0c2918d-947e-4dff-824d-8d117630dff6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T12:00:04.822Z", "date_only": false, "value": "2026-09-12T12:00:04.822051Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AWkoFg767D37YJFVLP2hvpE2A336baTXU6v1_ymL6aj7Sw4", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "70f8f6b7-2280-4d46-9ded-9eed513b6f00"}, {"timestamp": "2026-09-12T16:00:09.150Z", "date_only": false, "value": "2026-09-12T16:00:09.150920Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TlZupgjduvIHJZ3L7vku4R_7_V5Bx_dgLPzGJ6X1oCSFC68", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "4313fef4-a0a5-4974-b394-6c14c485ed0c"}, {"timestamp": "2026-09-12T22:00:05.656Z", "date_only": false, "value": "2026-09-12T22:00:05.656198Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "79dd9c56-600e-41a3-9d75-4f9932211b51"}, {"timestamp": "2026-09-13T00:00:06.068Z", "date_only": false, "value": "2026-09-13T00:00:06.068895Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "1e499f92-a03a-45b6-a418-f3b4d54417e2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T05:00:04.750Z", "date_only": false, "value": "2026-09-13T05:00:04.750595Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1KTvUTSi7Eydz2Zgvb3yvAULumVCOo3s8x855xBc1buEToQ", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "6318feca-1712-43d5-bbfe-038b85e862df"}, {"timestamp": "2026-09-13T15:00:05.789Z", "date_only": false, "value": "2026-09-13T15:00:05.789155Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CQ8nQMs8BNL-Z7vaKvEGnVNaoqTlr5j0_QsaYmRYgkZ8EHg", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "fd16400c-77d0-458d-9a51-794d27aad0c5"}, {"timestamp": "2026-09-13T19:00:06.867Z", "date_only": false, "value": "2026-09-13T19:00:06.867544Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WSHZL1gDBP7KCGKK3R-W2HApOykqOxN1GVtZoP7qMGNNGi8", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "68f14724-f698-4879-83e9-9a7a2d63e00d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T22:00:08.428Z", "date_only": false, "value": "2026-09-13T22:00:08.428893Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kwhEOs_lBjQ9GUnpMBML3K6wJJ9REMCRoPtFtKI4Qi_EvtM", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "5284cb91-fe97-4f25-af73-42ecd8c8c40c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:12.453Z", "date_only": false, "value": "2026-09-14T00:00:12.453172Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CQ8nQMs8BNL-Z7vaKvEGnVNaoqTlr5j0_QsaYmRYgkZ8EHg", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "862deb89-dc49-4ffc-a58e-c36d674aa233", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:30.375Z", "date_only": false, "value": "2026-09-14T00:00:30.375255Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1KTvUTSi7Eydz2Zgvb3yvAULumVCOo3s8x855xBc1buEToQ", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "be9c9485-09d0-44ac-b8f0-aaba19edbe2e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T04:00:03.978Z", "date_only": false, "value": "2026-09-14T04:00:03.978467Z", "kind": "sighting", "label": "Seen", "source": "Telegram/u1WPiwlSFnvBBDng3MFr7wlITKXQpPT-BlqemGcsMOgMFrU", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "d24af3e0-030d-4a26-8dc5-9ef9a7902e69"}, {"timestamp": "2026-09-14T15:00:04.005Z", "date_only": false, "value": "2026-09-14T15:00:04.005611Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UvYs8dujYL9SAEG4Ree92p6gHcxC2s2MVir1G_yY-ucY8Hw", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "b3059589-4c7e-4ce8-8413-293578a67cfe", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T20:00:06.008Z", "date_only": false, "value": "2026-09-14T20:00:06.008344Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wgjyJHTUQkU_Aup-7KRVbF84GozcxgQqhZAklKjh9W6ERzQ", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "857b3da4-0d1b-48e4-a151-f19b56095e8b"}, {"timestamp": "2026-09-14T22:00:04.991Z", "date_only": false, "value": "2026-09-14T22:00:04.991934Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AGD5SDO8TDW5GITpulVmfN7JMEyBzHdTcVz94o3GRwTvP0o", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "992ecc8f-21ef-48ad-8b9e-6dec788f7218"}, {"timestamp": "2026-09-15T00:00:09.369Z", "date_only": false, "value": "2026-09-15T00:00:09.369577Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AGD5SDO8TDW5GITpulVmfN7JMEyBzHdTcVz94o3GRwTvP0o", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "7ec9b89f-870c-4af1-a79d-5906214550be", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T07:00:05.641Z", "date_only": false, "value": "2026-09-15T07:00:05.641101Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hSG9Wih2ME2PNQO2VEupdPEbIHG13WUV6vwzw59cm6Fnkro", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "4dcb6ed1-f553-489c-b01f-6b09fb7f7b84", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T14:00:06.559Z", "date_only": false, "value": "2026-09-15T14:00:06.559249Z", "kind": "sighting", "label": "Seen", "source": "Telegram/12c7l4MsPCuEGNFPjxPaBcpiCFY7aJABo_RsxWIh1dEdtg8", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "52e6de87-6645-4a52-8cf4-d40b2b4aa42a"}, {"timestamp": "2026-09-15T17:00:04.466Z", "date_only": false, "value": "2026-09-15T17:00:04.466559Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0yY1wurwAZrB01Th5GWnoeUyGWABJWb321Ym_rmWLE9wQGM", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "5b9fd276-b26b-46d5-9b9c-c98f06f8b868"}, {"timestamp": "2026-09-15T23:00:05.943Z", "date_only": false, "value": "2026-09-15T23:00:05.943994Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-jaw7shGWBAW0ZISjxwzBGEYa0PixEtj6vwjZFs2u4xGywg", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "fca0892c-a79d-4f69-b9d4-71d946b02079"}, {"timestamp": "2026-09-16T00:00:12.990Z", "date_only": false, "value": "2026-09-16T00:00:12.990406Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/12c7l4MsPCuEGNFPjxPaBcpiCFY7aJABo_RsxWIh1dEdtg8", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "1008aba0-a093-43ec-ab71-67ec9ddb868f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:13.606Z", "date_only": false, "value": "2026-09-16T00:00:13.606584Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0yY1wurwAZrB01Th5GWnoeUyGWABJWb321Ym_rmWLE9wQGM", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "ac8db186-db9d-41d2-85e5-13e8e3768011", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T06:00:05.363Z", "date_only": false, "value": "2026-09-16T06:00:05.363320Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ai9lIL90PujQpn_BPUeIJIk72oV_bEcQjGvQVX5tm5YZbUs", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "d5f3da64-1b8d-4f0e-b459-04cc3b1eb021"}, {"timestamp": "2026-09-21T16:47:43.935Z", "date_only": false, "value": "2026-09-21T16:47:43.935Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-43520", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T16:47:43.935Z", "date_only": false, "value": "2026-09-21T16:47:43.935Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-43520", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-25T09:10:24Z", "date_only": false, "value": "2026-09-25T09:10:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/keniwS0SOR8XfUT7qi4M0GEQBlv0hazqNMMOgVgEkVrtQ8Y", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "e589b124-3d8f-4f30-877e-dae8fb113682", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:10:24Z", "date_only": false, "value": "2026-09-25T09:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/keniwS0SOR8XfUT7qi4M0GEQBlv0hazqNMMOgVgEkVrtQ8Y", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "b94af34c-2aa4-43da-9eb1-ba0ab30500fd"}, {"timestamp": "2026-09-27T09:02:44Z", "date_only": false, "value": "2026-09-27T09:02:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/6348", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "2be6f2d9-1ea1-414d-ab9d-52e787ab64be", "content": "DarkSword: full-chain \u0434\u043b\u044f iOS 18.4\u201318.7 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 Safari \u0434\u043e \u044f\u0434\u0440\u0430\n\nGoogle Threat Intelligence Group \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 Lookout \u0438 iVerify \u043e\u043f\u0438\u0441\u0430\u043b\u0430 DarkSword \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 spyware-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438 \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0435.\n\n\u0412\u0441\u0435 \u0441\u0442\u0430\u0434\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 JavaScript, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434 PPL/SPTM \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e native-\u043a\u043e\u0434\u0430 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d.\n\n \u0426\u0435\u043f\u043e\u0447\u043a\u0430\nRCE \u0432 WebContent \u0447\u0435\u0440\u0435\u0437 JavaScriptCore:\nCVE-2025-31277 (\u0434\u043e 18.6) \u0438\u043b\u0438 CVE-2025-43529 (18.6\u201318.7, GC-\u0431\u0430\u0433 \u0432 DFG JIT)\n\n\u0417\u0430\u0442\u0435\u043c user-mode PAC bypass \u0432 dyld \u2014 CVE-2026-20700.\n\n\u041f\u043e\u0431\u0435\u0433 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u2014 OOB \u0432 ANGLE \u0447\u0435\u0440\u0435\u0437 WebGL (CVE-2025-14174, sbx0_main.js).\n\n\u0418\u0437 GPU \u0432 mediaplaybackd \u2014 COW-\u0431\u0430\u0433 XNU (CVE-2025-43510, sbx1_main.js), \u043a\u0443\u0434\u0430 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u044f JavaScriptCore.\n\nLPE \u2014 race \u0432 VFS XNU (CVE-2025-43520, pe_main.js).\n\n \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430\n\u0421\u043a\u0440\u044b\u0442\u044b\u0439 iframe \u2192 frame.html \u2192 rce_loader.js, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 iOS \u0442\u044f\u043d\u0435\u0442 rce_worker_18.x.js.\n\u041a\u043b\u044e\u0447 uid \u0432 sessionStorage \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435.\n\n \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\nGHOSTKNIFE, GHOSTSABER, GHOSTBLADE:\n\u2014 iMessage\n\u2014 Telegram\n\u2014 WhatsApp\n\u2014 keychain\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 Wi-Fi\n\u2014 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438\n\u2014 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044f\n\n \u0414\u043b\u044f \u0444\u043e\u0440\u0435\u043d\u0437\u0438\u043a\u0438\nGHOSTKNIFE \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432:\n/tmp/./STORAGE/\n\u0438 \u0447\u0438\u0441\u0442\u0438\u0442 crash-\u043b\u043e\u0433\u0438:\nlet files = MyHelper.getContentsOfDir(\"/var/mobile/Library/Logs/CrashReporter/\");\n// \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438\nif(file.includes(\"mediaplaybackd\")  file.includes(\"SpringBoard\")  file.includes(\"com.apple.WebKit.\") || file.includes(\"panic-full-\"))\n  MyHelper.deleteFileAtPath(file);\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438.\nGHOSTBLADE \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0438\u0441\u0442\u0438\u0442 systemgroup.com.apple.osanalytics/DiagnosticReports/.\n\nIOC\nstatic.cdncounter[.]net \u2014 UNC6353, watering hole \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435\nsnapshare[.]chat \u2014 UNC6748\n\nYARA-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 IOC \u2014 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 GTIG.\n\n\u26a0\ufe0f \u0424\u0438\u043a\u0441\u044b\n23 \u043c\u0430\u0440\u0442\u0430 2026 poc \u0443\u0442\u0451\u043a \u043d\u0430 GitHub.\n\u0424\u0438\u043a\u0441\u044b:\n\u2014 iOS 26.3 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442 dyld\n\u2014 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 18 \u2014 iOS 18.7.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Apple 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 Lockdown Mode.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 23.09.2026.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: GTIG \u2014 The Proliferation of DarkSword\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2MAX", "url": "https://t.me/poxek/6348", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-27T09:02:44Z", "date_only": false, "value": "2026-09-27T09:02:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/6348", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "c59ed080-25d4-42ac-b3e0-6ffc584be17e", "content": "DarkSword: full-chain \u0434\u043b\u044f iOS 18.4\u201318.7 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u043e\u0442 Safari \u0434\u043e \u044f\u0434\u0440\u0430\n\nGoogle Threat Intelligence Group \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 Lookout \u0438 iVerify \u043e\u043f\u0438\u0441\u0430\u043b\u0430 DarkSword \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 spyware-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438 \u0438 \u0423\u043a\u0440\u0430\u0438\u043d\u0435.\n\n\u0412\u0441\u0435 \u0441\u0442\u0430\u0434\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 JavaScript, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434 PPL/SPTM \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e native-\u043a\u043e\u0434\u0430 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d.\n\n \u0426\u0435\u043f\u043e\u0447\u043a\u0430\nRCE \u0432 WebContent \u0447\u0435\u0440\u0435\u0437 JavaScriptCore:\nCVE-2025-31277 (\u0434\u043e 18.6) \u0438\u043b\u0438 CVE-2025-43529 (18.6\u201318.7, GC-\u0431\u0430\u0433 \u0432 DFG JIT)\n\n\u0417\u0430\u0442\u0435\u043c user-mode PAC bypass \u0432 dyld \u2014 CVE-2026-20700.\n\n\u041f\u043e\u0431\u0435\u0433 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u2014 OOB \u0432 ANGLE \u0447\u0435\u0440\u0435\u0437 WebGL (CVE-2025-14174, sbx0_main.js).\n\n\u0418\u0437 GPU \u0432 mediaplaybackd \u2014 COW-\u0431\u0430\u0433 XNU (CVE-2025-43510, sbx1_main.js), \u043a\u0443\u0434\u0430 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043f\u0438\u044f JavaScriptCore.\n\nLPE \u2014 race \u0432 VFS XNU (CVE-2025-43520, pe_main.js).\n\n \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430\n\u0421\u043a\u0440\u044b\u0442\u044b\u0439 iframe \u2192 frame.html \u2192 rce_loader.js, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 iOS \u0442\u044f\u043d\u0435\u0442 rce_worker_18.x.js.\n\u041a\u043b\u044e\u0447 uid \u0432 sessionStorage \u043e\u0442\u0441\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435.\n\n \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\nGHOSTKNIFE, GHOSTSABER, GHOSTBLADE:\n\u2014 iMessage\n\u2014 Telegram\n\u2014 WhatsApp\n\u2014 keychain\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 Wi-Fi\n\u2014 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438\n\u2014 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044f\n\n \u0414\u043b\u044f \u0444\u043e\u0440\u0435\u043d\u0437\u0438\u043a\u0438\nGHOSTKNIFE \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432:\n/tmp/./STORAGE/\n\u0438 \u0447\u0438\u0441\u0442\u0438\u0442 crash-\u043b\u043e\u0433\u0438:\nlet files = MyHelper.getContentsOfDir(\"/var/mobile/Library/Logs/CrashReporter/\");\n// \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438\nif(file.includes(\"mediaplaybackd\")  file.includes(\"SpringBoard\")  file.includes(\"com.apple.WebKit.\") || file.includes(\"panic-full-\"))\n  MyHelper.deleteFileAtPath(file);\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445 \u0437\u0432\u0435\u043d\u044c\u0435\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438.\nGHOSTBLADE \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0447\u0438\u0441\u0442\u0438\u0442 systemgroup.com.apple.osanalytics/DiagnosticReports/.\n\nIOC\nstatic.cdncounter[.]net \u2014 UNC6353, watering hole \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435\nsnapshare[.]chat \u2014 UNC6748\n\nYARA-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 IOC \u2014 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 GTIG.\n\n\u26a0\ufe0f \u0424\u0438\u043a\u0441\u044b\n23 \u043c\u0430\u0440\u0442\u0430 2026 poc \u0443\u0442\u0451\u043a \u043d\u0430 GitHub.\n\u0424\u0438\u043a\u0441\u044b:\n\u2014 iOS 26.3 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442 dyld\n\u2014 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 18 \u2014 iOS 18.7.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Apple 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 Lockdown Mode.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 23.09.2026.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: GTIG \u2014 The Proliferation of DarkSword\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2MAX", "url": "https://t.me/poxek/6348"}, {"timestamp": "2026-10-07T11:10:00.153Z", "date_only": false, "value": "2026-10-07T11:10:00.153", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-43520", "record": "FKIE_CVE-2025-43520", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T17:07:15Z", "date_only": false, "value": "2026-10-30T17:07:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/108193", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "e7fd1a08-8a57-4f02-83e6-4f9f432828f9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cs-build\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a df2029\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-30 16:57:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nClearSword cloud build (iOS kernel exploit PoC, CVE-2025-43520)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/108193", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-43520", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "650af838-d4bc-44ff-8222-7e59092205e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-08T02:30:23.937Z", "date_only": false, "value": "2026-11-08T02:30:23.937198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3mzrekdlcta2y", "record": "cve-2025-43520", "field": "creation_timestamp", "uuid": "3e3254ee-6a7c-40a0-a113-45a217ce3722", "content": "the ios exploit chains run cve-2025-43529, cve-2026-20700, cve-2025-14174, cve-2025-43510, and cve-2025-43520.", "url": "https://bsky.app/profile/jarkafterdark.com/post/3mzrekdlcta2y"}], "metrics": {"as_of": "2026-11-09T18:21:38.885Z", "anchors": {"origin": {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-09-13T00:00:06.068Z", "date_only": false, "value": "2026-09-13T00:00:06.068895Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "1e499f92-a03a-45b6-a418-f3b4d54417e2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-03-18T15:22:35Z", "date_only": false, "value": "2026-03-18T15:22:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8007", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "14953e6d-cdec-425f-942c-d4c6a6e5f420", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "url": "https://t.me/true_secator/8007", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 11636555.0, "hours": 3232.376388888889, "days": 134.68234953703703, "min_seconds": 11636555.0, "max_seconds": 11636555.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-03-18T15:22:35Z", "date_only": false, "value": "2026-03-18T15:22:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8007", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "14953e6d-cdec-425f-942c-d4c6a6e5f420", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "url": "https://t.me/true_secator/8007", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 11636555.0, "hours": 3232.376388888889, "days": 134.68234953703703, "min_seconds": 11636555.0, "max_seconds": 11636555.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-03-18T15:22:35Z", "date_only": false, "value": "2026-03-18T15:22:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8007", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "14953e6d-cdec-425f-942c-d4c6a6e5f420", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "url": "https://t.me/true_secator/8007", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 27046806.068, "hours": 7513.001685555556, "days": 313.04173689814814, "min_seconds": 27046806.068, "max_seconds": 27046806.068, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-13T00:00:06.068Z", "date_only": false, "value": "2026-09-13T00:00:06.068895Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "1e499f92-a03a-45b6-a418-f3b4d54417e2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 32037698.885742, "hours": 8899.360801595001, "days": 370.80670006645835, "min_seconds": 32037698.885742, "max_seconds": 32037698.885742, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-11-03T23:00:00Z", "date_only": false, "value": "2025-11-03T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2473", "record": "WID-SEC-W-2025-2473", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-09T18:21:38.885Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 20401143.885742, "hours": 5666.9844127061115, "days": 236.12435052942132, "min_seconds": 20401143.885742, "max_seconds": 20401143.885742, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-18T15:22:35Z", "date_only": false, "value": "2026-03-18T15:22:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8007", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "14953e6d-cdec-425f-942c-d4c6a6e5f420", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "url": "https://t.me/true_secator/8007", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T18:21:38.885Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 4990892.817742, "hours": 1386.3591160394446, "days": 57.76496316831019, "min_seconds": 4990892.817742, "max_seconds": 4990892.817742, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-13T00:00:06.068Z", "date_only": false, "value": "2026-09-13T00:00:06.068895Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lvZoSvjV91yZTMX-xgJe2mU_RNxcHIJ7-k1h5uwUSmRwTbo", "record": "CVE-2025-43520", "field": "creation_timestamp", "uuid": "1e499f92-a03a-45b6-a418-f3b4d54417e2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T18:21:38.885Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}