Spyware isn't just for spies anymore—cybercriminals are now infecting everyday iPhones at scale

A new cybersecurity report reveals that spyware infections are exploding among regular people, not just high-profile targets. The threat hunting firm iVerify found about 1 spyware infection for every 1,000 consumer devices scanned. The attacks are increasingly driven by financial criminals using leaked iOS exploit kits like DarkSword and Coruna, which can infect iPhones just by visiting a compromised website, no clicks required.

The shift means iOS spyware has 'gone mainstream,' moving from targeted government surveillance tools to indiscriminate criminal rackets aimed at stealing credentials and cryptocurrency. While businesses have better defenses, ordinary users are more vulnerable, with criminals exploiting WebKit and kernel vulnerabilities at scale through malicious ads and fake financial sites. The takeaway: iPhone security is no longer just about avoiding shady links—your browser alone can now be the attack vector for mass-scale financial theft.