SlowMist said on October 24 that it found more than 1,500 DarkSword-related sites impersonating exchanges, wallets, shopping and gaming services. Reporting describes attacks chaining vulnerabilities on unpatched iOS devices after visits to malicious pages. The site count must not be treated as successful intrusions or stolen-wallet totals. The relevant flaws have reportedly been patched, making current supported OS updates and avoiding unsolicited exchange links important. Wallet recovery phrases should not be stored in notes apps or entered into webpages.