Russian State-Sponsored Group TA446 Deploys DarkSword Exploit Kit Against iOS Devices

📌 Proofpoint identified a targeted spear-phishing campaign where the Russian state-sponsored threat group TA446 (also known as Callisto) deployed the DarkSword exploit kit against iOS devices. The campaign leverages a recently disclosed exploit kit, though no specific CVEs or technical vulnerabilities were detailed in the report. Attribution to TA446 was made with high confidence, linking the activity to Russian cyber operations. The attack vector involves malicious emails, but no exact timeline, victim sectors, or geographic targets were specified. No additional impacts, such as data exfiltration or device compromise outcomes, were described beyond the use of the exploit kit.