DarkSort Exploit Hits Ukrainian Crypto Wallets: $68K Stolen

Hackers made off with more than $68,000 in USDT from a Ukrainian crypto holder by way of the DarkSort exploit, which they used to take over an iOS device running an old version of the operating system. It is an example of the sort of advanced malware cybercriminals are putting to use and a sign of the mounting threat to crypto wallets in the region.

How the DarkSort Exploit Targets Crypto Wallets

In its most recent report, Incrypted says the DarkSort exploit allows hackers to take control of outdated iOS devices. They target private keys, seed phrases, and passwords on a victim’s phone by exploiting weaknesses in the older OS. The Ukrainian user in question lost over $68,000 in USDT due to relying on an obsolete iOS.

Experts at Google Threat Intelligence have stated that DarkSort is being used in attacks on the wider crypto industry and Ukrainian users in particular. Simply visiting a compromised site is enough for the malware toolkit to do its work, so those who have not updated their mobile OS are at risk.

Rising Cyber Threats in Ukraine’s Crypto Community

The episode is evidence of the heightened cybersecurity risks facing crypto in Ukraine. Hackers have found ways to access wallet data through various means, whether via metadata or content in the photo gallery of an infected smartphone; even an innocuous-looking image or app data can be all an attacker needs to gain access.

Incrypted has had cybersecurity specialists note how vulnerable digital wallets are, given how easily a smartphone can be compromised by a malicious link or website. Their advice is to refrain from keeping any sensitive information or seed phrases in digital form on such a device.

Expert Advice: How to Secure Your Crypto Assets

There are best practices one can follow to prevent malware of the DarkSort variety. For a start, regularly updating the operating system to close any security gaps is essential. If one has sizeable holdings to protect, hardware or other offline storage is preferable to a mobile phone. And as a precaution against this type of exploit, experts advise that connected devices should never be used to store private keys or recovery phrases in plain text.