{"id":55808,"date":"2026-10-27T08:18:20","date_gmt":"2026-10-27T08:18:20","guid":{"rendered":"https:\/\/buycrypt.com\/blog\/darksort-exploit\/"},"modified":"2026-10-27T08:18:20","modified_gmt":"2026-10-27T08:18:20","slug":"darksort-exploit","status":"publish","type":"post","link":"https:\/\/buycrypt.com\/blog\/en\/darksort-exploit\/","title":{"rendered":"Hackers Steal $68,000 in USDT from Ukrainian User&#8217;s Mobile Wallet"},"content":{"rendered":"<p>Hackers made off with more than $68,000 in USDT from a Ukrainian crypto holder by way of the DarkSort exploit, which they used to take over an iOS device running an old version of the operating system. It is an example of the sort of advanced malware cybercriminals are putting to use and a sign of the mounting threat to crypto wallets in the region.<\/p>\n<h2>How the DarkSort Exploit Targets Crypto Wallets<\/h2>\n<p>In its most recent report, Incrypted says the DarkSort exploit allows hackers to take control of outdated iOS devices. They target private keys, seed phrases, and passwords on a victim\u2019s phone by exploiting weaknesses in the older OS. The Ukrainian user in question lost over $68,000 in USDT due to relying on an obsolete iOS.<\/p>\n<p>Experts at Google Threat Intelligence have stated that DarkSort is being used in attacks on the wider crypto industry and Ukrainian users in particular. Simply visiting a compromised site is enough for the malware toolkit to do its work, so those who have not updated their mobile OS are at risk.<\/p>\n<h2>Rising Cyber Threats in Ukraine\u2019s Crypto Community<\/h2>\n<p>The episode is evidence of the heightened cybersecurity risks facing crypto in Ukraine. Hackers have found ways to access wallet data through various means, whether via metadata or content in the photo gallery of an infected smartphone; even an innocuous-looking image or app data can be all an attacker needs to gain access.<\/p>\n<p>Incrypted has had cybersecurity specialists note how vulnerable digital wallets are, given how easily a smartphone can be compromised by a malicious link or website. Their advice is to refrain from keeping any sensitive information or seed phrases in digital form on such a device.<\/p>\n<h2>Expert Advice: How to Secure Your Crypto Assets<\/h2>\n<p>There are best practices one can follow to prevent malware of the DarkSort variety. For a start, regularly updating the operating system to close any security gaps is essential. If one has sizeable holdings to protect, hardware or other offline storage is preferable to a mobile phone. And as a precaution against this type of exploit, experts advise that connected devices should never be used to store private keys or recovery phrases in plain text.<\/p>\n<p class=\"blogger-link\"><em>Every call by Incrypted and how it played out \u2014 <a href=\"https:\/\/buycrypt.com\/traders\/bloggers\/incrypted\/\">in the BuyCrypt bloggers tracker<\/a>.<\/em><\/p>\n<p class=\"forpost-source\"><em>Source \u2014 Incrypted: <a href=\"https:\/\/www.youtube.com\/watch?v=iAIQHyjLxEk\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.youtube.com\/watch?v=iAIQHyjLxEk<\/a><\/em><\/p>\n<p><!-- money-cta --><\/p>\n<p>Learn how to protect your crypto assets by practicing secure trading strategies risk-free on our simulator. <a href=\"https:\/\/buycrypt.com\/crypto-trading-simulator\">crypto trading simulator<\/a>.<\/p>\n<p><!-- related-seo --><\/p>\n<div class=\"related-seo\">\n<h3>Related articles<\/h3>\n<ul>\n<li><a href=\"https:\/\/buycrypt.com\/blog\/en\/crypto-exchange-restricts-limit-orders\/\">Crypto Exchange Restricts Limit Orders for Market Fairness<\/a><\/li>\n<li><a href=\"https:\/\/buycrypt.com\/blog\/en\/crypto-bribes-case\/\">Crypto Bribes Case: Investigator Gets 16 Years in Prison<\/a><\/li>\n<li><a href=\"https:\/\/buycrypt.com\/blog\/en\/chinese-hackers-infect-ios\/\">Chinese hackers infect iOS via Vietnamese streaming sites<\/a><\/li>\n<\/ul>\n<\/div>\n<p><!-- \/related-seo --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>DarkSort exploit targets outdated iOS devices, with $68,000 in USDT stolen from a Ukrainian user. Find out how to protect your crypto wallets.<\/p>\n","protected":false},"author":8,"featured_media":55806,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"DarkSort Exploit Hits Ukrainian Crypto Wallets: $68K Stolen","rank_math_description":"DarkSort exploit targets outdated iOS devices, with $68,000 in USDT stolen from a Ukrainian user. Find out how to protect your crypto wallets.","rank_math_focus_keyword":"DarkSort exploit","_forpost_external_id":"0e1e367d-68d7-4e50-82c2-72afb5bd71f7","_seorun_article_id":"f16a42c6-65b2-404f-a05d-283826082048","footnotes":""},"categories":[369],"tags":[13329,17222,11797,17226,1716,17228],"class_list":["post-55808","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-en","tag-crypto-security","tag-darksort","tag-incrypted","tag-ios-exploit","tag-ukraine","tag-wallet-hack","resize-featured-image"],"lang":"en","translations":{"en":55808,"ru":55807},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/posts\/55808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/comments?post=55808"}],"version-history":[{"count":0,"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/posts\/55808\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/media\/55806"}],"wp:attachment":[{"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/media?parent=55808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/categories?post=55808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buycrypt.com\/blog\/wp-json\/wp\/v2\/tags?post=55808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}