Webpack source code reconstruction of the DarkSword iOS exploit chain (REFERENCE ONLY)
If you diff the files, MigFilterBypassThread.js will show as changed, its purely cosmetical, the threat actors probably just compiled it before changing the rest of the code to use libs/ instead of ../
Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain
I'm not interested in the RU/UA politics, sloppy tradecraft results in exploits being found.
contact me in telegram for any questions: @darknullbyte