Gardaí issue urgent warning to Apple users over new virus threat

Gardaí have issued a warning

An Garda Síochána released information on social media about the virus, as well as instructions on how to avoid it.

They went on to state that the virus targets the system that powers Apple devices and victims of the malware should ‘consult a competent cyber security professional and report the crime to their local Garda Station', per Extra.ie.

Gardaí say devices are becoming infected when users visit ‘compromised websites’ or links that inject the malware and ‘bypass the standard protections on the phone’.

They said: "Users don’t receive any notification that the device has been compromised as the malware works silently in the background with no effect on the phone’s operation.

"The malware primarily targets Apple devices running iOS versions 18.4 – 18.7 and allows attackers to access content, messages, contacts and credentials stored on the phone."

Gardaí further offered advice on what Apple users can do to protect their phones from the virus.

They added: "Apple has released patches to account for their vulnerability, and users are advised to update their devices to iOS 26.3.1 or 18.7.6 to fully protect their phones.

"Enabling lockdown mode in the device settings will give stronger protection, but this may limit some functionality."

A new virus has arrived which targets the system that powers Apple devices. Here’s what you need to know 👇

Victims of the malware should consult a competent cyber security professional and report the crime to their local Garda Station.#KeepingPeopleSafe pic.twitter.com/DEbcyFrlro

— Garda Info (@gardainfo) March 23, 2026

Lockdown Mode is a high-level security feature designed to protect users from advanced cyberattacks, including mercenary spyware. It limits certain apps, websites, and functions to reduce potential vulnerabilities, meaning most attachments are blocked, link previews are disabled, and calls from unknown numbers are prevented.

The virus, now dubbed 'DarkSword', is known to steal a wide range of personal information, including data from cryptocurrency wallet apps.

In a recent report, Google Threat Intelligence Group (GTIG) said that DarkSword has been used since at least November 2025, per Extra ie.